fix(cli): preserve PGAI_REGISTRY in .env during local-install

- CLI now preserves PGAI_REGISTRY from existing .env file when running
  local-install (needed for CI with GitLab Container Registry)
- Fix CI heredoc indentation that was adding spaces to .env values
- Update terraform docs to use docker-compose directly (no Node.js on VM)

Author: claude

.gitlab-ci.yml

@@ -352,10 +352,10 @@ cli:node:e2e:dind:
       docker images | grep "$CI_REGISTRY_IMAGE"
     # Create .env file with registry and tag
     - |
-      cat > .env << EOF
-      PGAI_REGISTRY=$CI_REGISTRY_IMAGE
-      PGAI_TAG=$PGAI_TAG
-      EOF
+      cat > .env <<EOF
+PGAI_REGISTRY=$CI_REGISTRY_IMAGE
+PGAI_TAG=$PGAI_TAG
+EOF
   script:
     - ./tests/e2e.cli.sh
   after_script:
@@ -396,10 +396,10 @@ cli:node:full:dind:
       docker images | grep "$CI_REGISTRY_IMAGE"
     # Create .env file with registry and tag
     - |
-      cat > .env << EOF
-      PGAI_REGISTRY=$CI_REGISTRY_IMAGE
-      PGAI_TAG=$PGAI_TAG
-      EOF
+      cat > .env <<EOF
+PGAI_REGISTRY=$CI_REGISTRY_IMAGE
+PGAI_TAG=$PGAI_TAG
+EOF
   script:
     - echo "=== Testing local-install (demo mode) ==="
     - node ./cli/dist/bin/postgres-ai.js mon local-install --demo

cli/bin/postgres-ai.ts

@@ -1187,11 +1187,16 @@ mon
     const envFile = path.resolve(projectDir, ".env");
     const imageTag = opts.tag || pkg.version;
 
-    // Build .env content
+    // Build .env content, preserving important existing values
     const envLines: string[] = [`PGAI_TAG=${imageTag}`];
-    // Preserve GF_SECURITY_ADMIN_PASSWORD if it exists
     if (fs.existsSync(envFile)) {
       const existingEnv = fs.readFileSync(envFile, "utf8");
+      // Preserve PGAI_REGISTRY if it exists (for CI/custom registry usage)
+      const registryMatch = existingEnv.match(/^PGAI_REGISTRY=(.+)$/m);
+      if (registryMatch) {
+        envLines.push(`PGAI_REGISTRY=${registryMatch[1].trim()}`);
+      }
+      // Preserve GF_SECURITY_ADMIN_PASSWORD if it exists
       const pwdMatch = existingEnv.match(/^GF_SECURITY_ADMIN_PASSWORD=(.+)$/m);
       if (pwdMatch) {
         envLines.push(`GF_SECURITY_ADMIN_PASSWORD=${pwdMatch[1]}`);

terraform/aws/README.md

@@ -179,7 +179,8 @@ Method 2: Manual configuration (avoids credentials in state):
 ssh ubuntu@your-ip
 cd /home/postgres_ai/postgres_ai
 sudo -u postgres_ai vim instances.yml
-sudo -u postgres_ai postgresai mon update-config
+sudo -u postgres_ai docker-compose run --rm sources-generator
+sudo -u postgres_ai docker-compose restart pgwatch-postgres pgwatch-prometheus
 ```
 
 ### Backup