Initial commit: MOPC platform with Docker deployment setup

Full Next.js 15 platform with tRPC, Prisma, PostgreSQL, NextAuth.
Includes production Dockerfile (multi-stage, port 7600), docker-compose
with registry-based image pull, Gitea Actions CI workflow, nginx config
for portal.monaco-opc.com, deployment scripts, and DEPLOYMENT.md guide.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

scripts/deploy.sh

@@ -0,0 +1,103 @@
+#!/bin/bash
+# =============================================================================
+# MOPC Platform - First-Time Deployment Script
+# =============================================================================
+# Usage: ./scripts/deploy.sh
+# Run this once on the Linux VPS to set up the platform.
+# The Docker image is built by Gitea CI and pulled from the registry.
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
+DOCKER_DIR="$PROJECT_DIR/docker"
+
+echo "============================================"
+echo "  MOPC Platform - Deployment"
+echo "============================================"
+echo ""
+
+# 1. Check Docker is available
+if ! command -v docker &> /dev/null; then
+    echo "ERROR: Docker is not installed."
+    exit 1
+fi
+
+if ! docker compose version &> /dev/null; then
+    echo "ERROR: Docker Compose v2 is not available."
+    exit 1
+fi
+
+# 2. Check environment file
+if [ ! -f "$DOCKER_DIR/.env" ]; then
+    echo "No .env file found in docker/."
+    echo "Copying template..."
+    cp "$DOCKER_DIR/.env.production" "$DOCKER_DIR/.env"
+    echo ""
+    echo "IMPORTANT: Edit docker/.env with your production values before continuing."
+    echo "  nano $DOCKER_DIR/.env"
+    echo ""
+    exit 1
+fi
+
+# 3. Load registry URL from env
+source "$DOCKER_DIR/.env"
+if [ -z "$REGISTRY_URL" ] || [ "$REGISTRY_URL" = "CHANGE_ME" ]; then
+    echo "ERROR: REGISTRY_URL is not set in docker/.env"
+    echo "Set it to your Gitea registry URL (e.g. gitea.example.com/your-org)"
+    exit 1
+fi
+
+# 4. Log in to container registry
+echo "==> Logging in to container registry ($REGISTRY_URL)..."
+docker login "$REGISTRY_URL"
+
+# 5. Create data directories
+echo "==> Creating data directories..."
+sudo mkdir -p /data/mopc/postgres
+sudo chown -R 1000:1000 /data/mopc
+
+# 6. Pull and start
+echo "==> Pulling latest images..."
+cd "$DOCKER_DIR"
+docker compose pull app
+
+echo "==> Starting services..."
+docker compose up -d
+
+# 7. Wait for health check
+echo "==> Waiting for application to start..."
+MAX_WAIT=120
+WAITED=0
+while [ $WAITED -lt $MAX_WAIT ]; do
+    if curl -sf http://localhost:7600/api/health > /dev/null 2>&1; then
+        echo ""
+        echo "============================================"
+        echo "  Application is running!"
+        echo "============================================"
+        echo ""
+        echo "  URL:     http://localhost:7600"
+        echo "  Health:  http://localhost:7600/api/health"
+        echo ""
+        echo "  NEXT STEPS:"
+        echo "  1. Run the one-time database seed:"
+        echo "     ./scripts/seed.sh"
+        echo ""
+        echo "  2. Set up Nginx reverse proxy:"
+        echo "     sudo ln -s $DOCKER_DIR/nginx/mopc-platform.conf /etc/nginx/sites-enabled/"
+        echo "     sudo nginx -t && sudo systemctl reload nginx"
+        echo ""
+        echo "  3. Set up SSL:"
+        echo "     sudo certbot --nginx -d portal.monaco-opc.com"
+        echo ""
+        exit 0
+    fi
+    sleep 2
+    WAITED=$((WAITED + 2))
+    printf "."
+done
+
+echo ""
+echo "WARNING: Application did not become healthy within ${MAX_WAIT}s."
+echo "Check logs: cd $DOCKER_DIR && docker compose logs -f app"
+exit 1

scripts/seed.sh

@@ -0,0 +1,52 @@
+#!/bin/bash
+# =============================================================================
+# MOPC Platform - One-Time Database Seed
+# =============================================================================
+# Usage: ./scripts/seed.sh
+# Run this ONCE after the first deployment to populate the database with:
+#   - Super admin user
+#   - System settings
+#   - Program & Round 1 configuration
+#   - Evaluation form
+#   - Candidature data from CSV
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
+DOCKER_DIR="$PROJECT_DIR/docker"
+
+echo "============================================"
+echo "  MOPC Platform - Database Seed"
+echo "============================================"
+echo ""
+echo "This will seed the database with:"
+echo "  - Admin user & system settings"
+echo "  - Program, Round 1, evaluation form"
+echo "  - Candidature data from CSV"
+echo ""
+read -p "Continue? (y/N) " -n 1 -r
+echo ""
+
+if [[ ! $REPLY =~ ^[Yy]$ ]]; then
+    echo "Aborted."
+    exit 0
+fi
+
+echo ""
+echo "==> Running base seed (admin, settings, program, round, eval form)..."
+cd "$DOCKER_DIR"
+docker compose exec app npx tsx prisma/seed.ts
+
+echo ""
+echo "==> Running candidatures import from CSV..."
+docker compose exec app npx tsx prisma/seed-candidatures.ts
+
+echo ""
+echo "============================================"
+echo "  Seed complete!"
+echo "============================================"
+echo ""
+echo "  Admin login: matt.ciaccio@gmail.com"
+echo "  (Use magic link authentication)"
+echo ""

scripts/update.sh

@@ -0,0 +1,49 @@
+#!/bin/bash
+# =============================================================================
+# MOPC Platform - Update / Redeploy Script
+# =============================================================================
+# Usage: ./scripts/update.sh
+# Pulls the latest image from the registry and restarts the app.
+# PostgreSQL is NOT restarted.
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
+DOCKER_DIR="$PROJECT_DIR/docker"
+
+echo "============================================"
+echo "  MOPC Platform - Update"
+echo "============================================"
+echo ""
+
+# 1. Pull latest image from registry
+echo "==> Pulling latest image..."
+cd "$DOCKER_DIR"
+docker compose pull app
+
+# 2. Restart app only (postgres stays running)
+echo "==> Restarting app..."
+docker compose up -d app
+
+# 3. Wait for health check
+echo "==> Waiting for application to start..."
+MAX_WAIT=120
+WAITED=0
+while [ $WAITED -lt $MAX_WAIT ]; do
+    if curl -sf http://localhost:7600/api/health > /dev/null 2>&1; then
+        echo ""
+        echo "============================================"
+        echo "  Update complete! App is healthy."
+        echo "============================================"
+        exit 0
+    fi
+    sleep 2
+    WAITED=$((WAITED + 2))
+    printf "."
+done
+
+echo ""
+echo "WARNING: Application did not become healthy within ${MAX_WAIT}s."
+echo "Check logs: cd $DOCKER_DIR && docker compose logs -f app"
+exit 1