refine the whole prod setup

Signed-off-by: tdruez <tdruez@aboutcode.org>

Author: tdruez

compose.build.yml

@@ -0,0 +1,13 @@
+name: dejacode
+
+x-description: "Build override — builds the app image from source instead of using the pre-built image"
+
+services:
+  web:
+    build: .
+
+  worker:
+    build: .
+
+  scheduler:
+    build: .

compose.prod.yml

@@ -84,11 +84,9 @@ services:
       - "${NGINX_PUBLISHED_HTTP_PORT:-80}:80"
       - "${NGINX_PUBLISHED_HTTPS_PORT:-443}:443"
     volumes:
+      - ./etc/nginx/conf.d/:/etc/nginx/conf.d/
       - static:/var/dejacode/static/
       - webroot:/var/www/html/
-    configs:
-      - source: nginx_conf
-        target: /etc/nginx/conf.d/default.conf
     depends_on:
       - web
     restart: always
@@ -107,29 +105,3 @@ volumes:
   static:
   media:
   webroot:
-
-configs:
-  nginx_conf:
-    content: |
-      upstream gunicorn_app {
-          server web:8000;
-      }
-      server {
-          listen 80;
-          http2 on;
-          server_tokens off;
-          gzip on;
-          gzip_comp_level 6;
-          gzip_types text/css text/javascript application/javascript image/svg+xml;
-          location / {
-              proxy_pass http://gunicorn_app;
-              proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
-              proxy_set_header Host $$http_host;
-              proxy_redirect off;
-              client_max_body_size 1G;
-              proxy_read_timeout 600s;
-          }
-          location /static/ {
-              alias /var/dejacode/static/;
-          }
-      }

compose.yml

@@ -12,8 +12,8 @@ There are three ways to run DejaCode:
 
 - :ref:`run_with_docker` — **simplest option**, no repository checkout or build step
   required. Uses the pre-built Docker image published on GitHub.
-- :ref:`enterprise_deployment` — same pre-built image with custom nginx, domain
-  configuration, and hardware recommendations for production servers.
+- :ref:`enterprise_deployment` — same pre-built image with custom nginx configuration,
+  domain settings, and hardware recommendations for production servers.
 - :ref:`local_development_installation` — Docker-based setup for contributors.
 
 .. _run_with_docker:
@@ -44,7 +44,7 @@ Run the one-liner installer::
 This script will:
 
 - Create ``~/.dejacode/`` as the installation directory
-- Download ``compose.yml``, ``docker.env``, and the database seed data
+- Download ``compose.yml``, ``docker.env``, the nginx configuration, and the database seed data
 - Generate ``.env`` with a secure secret key
 - Install the ``dejacode`` command in ``~/.local/bin/``
 - Start all services and wait until the application is ready
@@ -145,26 +145,13 @@ Restart the stack to apply::
 The default nginx configuration embedded in ``compose.yml`` is suitable for
 local use. For production, replace it with your own configuration file.
 
-Create a ``compose.override.yml`` in your installation directory
-(``~/.dejacode/``) with the following content:
-
-.. code-block:: yaml
-
-    services:
-      nginx:
-        configs: []
-        volumes:
-          - ./nginx.conf:/etc/nginx/conf.d/default.conf
-
-Then create ``~/.dejacode/nginx.conf`` with your production nginx configuration
-(TLS termination, custom headers, upstream settings, etc.) and restart::
+The installer downloads a default nginx configuration to
+``~/.dejacode/etc/nginx/conf.d/default.conf``. Replace it with your own
+configuration (TLS termination, custom headers, upstream settings, etc.)
+and restart::
 
     dejacode down && dejacode up -d
 
-.. note::
-    Docker Compose automatically picks up ``compose.override.yml`` when present
-    in the same directory as ``compose.yml``.
-
 4. AboutCode integrations
 --------------------------
 

docs/installation.rst

@@ -34,6 +34,10 @@ curl -sSL "$REPO/data/postgresql/initdb.sql.gz" -o data/postgresql/initdb.sql.gz
 info "Downloading docker.env"
 curl -sSL "$REPO/docker.env" -o docker.env
 
+info "Downloading nginx configuration"
+mkdir -p etc/nginx/conf.d
+curl -sSL "$REPO/etc/nginx/conf.d/default.conf" -o etc/nginx/conf.d/default.conf
+
 # ── Generate .env with a secure secret key ────────────────────────────────────
 info "Generating .env"
 # Read enough bytes from urandom so tr has enough after filtering, then cut to 50 chars.