Deployment Redesign

Implemented the deployment redesign.
- Added Dockge-first-class stacks:
  - [stacks/infra/compose.yaml]
  - [stacks/caddy/compose.yaml]
- Added reusable business template: [deploy/business-compose.yaml.template]
- Added automated provisioning: [scripts/create-business.sh]
- Added per-business database/user, secrets, media volume, private networks, and Caddy route generation.
- Removed Traefik and manual business Compose files.
- Updated environment templates, .gitignore, and deployment documentation in [README.md]
Validation completed:
- Docker Compose config passed for infra, Caddy, and generated business stacks.
- Shell syntax validation passed.
- Registry image tags containing / were tested.
- No remaining Traefik or obsolete deployment references found.

scripts/create-business.sh

@@ -0,0 +1,80 @@
+#!/usr/bin/env bash
+set -Eeuo pipefail
+
+usage() {
+  echo "Usage: $0 <business-slug> <domain> [image-tag]" >&2
+  echo "Example: $0 blake-heritage blakeheritage.com nextchair:2026-09-04" >&2
+  exit 2
+}
+
+[[ $# -ge 2 && $# -le 3 ]] || usage
+business_slug="$1"
+domain="$2"
+image_tag="${3:-nextchair:latest}"
+repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+stack_root="${NEXTCHAIR_STACK_ROOT:-${repo_root}/stacks}"
+infra_env="${NEXTCHAIR_INFRA_ENV:-${repo_root}/.env.infra}"
+stack_dir="${stack_root}/${business_slug}"
+compose_template="${repo_root}/deploy/business-compose.yaml.template"
+
+[[ "$business_slug" =~ ^[a-z0-9]+([a-z0-9-]*[a-z0-9])?$ ]] || { echo "Invalid slug: use lowercase letters, numbers, and hyphens." >&2; exit 2; }
+[[ ${#business_slug} -le 22 ]] || { echo "Invalid slug: maximum length is 22 characters." >&2; exit 2; }
+[[ "$domain" =~ ^[A-Za-z0-9.-]+$ ]] || { echo "Invalid domain." >&2; exit 2; }
+[[ -f "$infra_env" ]] || { echo "Missing $infra_env. Copy .env.infra.example first." >&2; exit 1; }
+[[ -f "$compose_template" ]] || { echo "Missing $compose_template." >&2; exit 1; }
+[[ ! -e "$stack_dir" ]] || { echo "Stack already exists: $stack_dir" >&2; exit 1; }
+
+# shellcheck disable=SC1090
+source "$infra_env"
+[[ -n "${MYSQL_ROOT_PASSWORD:-}" ]] || { echo "MYSQL_ROOT_PASSWORD is required in $infra_env." >&2; exit 1; }
+
+database_name="nextchair_${business_slug//-/_}"
+database_user="$database_name"
+database_password="$(openssl rand -hex 24)"
+auth_secret="$(openssl rand -base64 48 | tr -d '\n')"
+installation_token="$(openssl rand -hex 32)"
+cron_secret="$(openssl rand -hex 32)"
+
+docker network inspect nextchair-db >/dev/null 2>&1 || docker network create nextchair-db >/dev/null
+docker network inspect nextchair-proxy >/dev/null 2>&1 || docker network create nextchair-proxy >/dev/null
+docker inspect nextchair-mysql >/dev/null 2>&1 || { echo "nextchair-mysql is not running. Start stacks/infra/compose.yaml first." >&2; exit 1; }
+
+printf 'Creating database %s...\n' "$database_name"
+sql="CREATE DATABASE IF NOT EXISTS \`$database_name\` CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci; CREATE USER IF NOT EXISTS '$database_user'@'%' IDENTIFIED BY '$database_password'; ALTER USER '$database_user'@'%' IDENTIFIED BY '$database_password'; GRANT ALL PRIVILEGES ON \`$database_name\`.* TO '$database_user'@'%'; FLUSH PRIVILEGES;"
+printf '%s\n' "$sql" | docker exec -i nextchair-mysql mysql -uroot -p"$MYSQL_ROOT_PASSWORD"
+
+mkdir -p "$stack_dir"
+sed \
+  -e "s|\${BUSINESS_SLUG}|$business_slug|g" \
+  -e "s|\${NEXTCHAIR_IMAGE:-nextchair:latest}|$image_tag|g" \
+  "$compose_template" > "$stack_dir/compose.yaml"
+cat > "$stack_dir/.env" <<EOF
+DOMAIN="$domain"
+DATABASE_HOST="nextchair-mysql"
+DATABASE_PORT=3306
+DATABASE_NAME="$database_name"
+DATABASE_USER="$database_user"
+DATABASE_PASSWORD="$database_password"
+DATABASE_CONNECTION_LIMIT=5
+DATABASE_CONNECT_TIMEOUT_MS=10000
+DATABASE_SSL=false
+AUTH_SECRET="$auth_secret"
+AUTH_TRUST_HOST=true
+NEXT_PUBLIC_APP_URL="https://$domain"
+INSTALLATION_TOKEN="$installation_token"
+CRON_SECRET="$cron_secret"
+NEXTCHAIR_IMAGE="$image_tag"
+EOF
+
+caddy_sites_dir="${NEXTCHAIR_CADDY_SITES_DIR:-${stack_root}/caddy/sites}"
+mkdir -p "$caddy_sites_dir"
+cat > "$caddy_sites_dir/$business_slug.caddy" <<EOF
+$domain {
+    reverse_proxy nextchair-$business_slug:3000
+}
+EOF
+
+chmod 600 "$stack_dir/.env"
+printf '\nCreated Dockge stack: %s\n' "$stack_dir"
+printf 'Created Caddy route: %s/%s.caddy\n' "$caddy_sites_dir" "$business_slug"
+printf 'Start it from Dockge, or run: docker compose -f %s up -d\n' "$stack_dir/compose.yaml"