feat: add Coolify deployment platform to dev stack

Add Coolify self-hosted deployment platform with:
- Coolify main service at coolify.dev.pivoine.art
- Dedicated PostgreSQL database (uses shared core instance)
- Soketi WebSocket server for real-time features
- Traefik routing with HTTPS and compression
- Environment variables in arty.yml (secrets in .env)
- Database creation in PostgreSQL init script

Coolify enables deploying applications from Git repositories,
including the pivoine.art Jekyll site from Gitea.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

dev/compose.yaml

@@ -83,6 +83,101 @@ services:
     networks:
       - compose_network
 
+  # Coolify - Self-hosted deployment platform
+  coolify:
+    image: ${DEV_COOLIFY_IMAGE:-ghcr.io/coollabsio/coolify:latest}
+    container_name: ${DEV_COMPOSE_PROJECT_NAME}_coolify
+    restart: unless-stopped
+    depends_on:
+      coolify_postgres:
+        condition: service_healthy
+      coolify_soketi:
+        condition: service_started
+    volumes:
+      - coolify_data:/data/coolify
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /data/coolify/ssh:/var/www/html/storage/app/ssh
+      - /data/coolify/applications:/var/www/html/storage/app/applications
+      - /data/coolify/databases:/var/www/html/storage/app/databases
+      - /data/coolify/services:/var/www/html/storage/app/services
+      - /data/coolify/backups:/var/www/html/storage/app/backups
+    environment:
+      - APP_ID=${DEV_COOLIFY_APP_ID}
+      - APP_KEY=${DEV_COOLIFY_APP_KEY}
+      - APP_NAME=Coolify
+      - APP_ENV=production
+      - APP_URL=https://${DEV_COOLIFY_TRAEFIK_HOST}
+      - APP_PORT=8000
+      - DB_HOST=${CORE_DB_HOST}
+      - DB_PORT=${CORE_DB_PORT}
+      - DB_DATABASE=${DEV_COOLIFY_DB_NAME}
+      - DB_USERNAME=${DB_USER}
+      - DB_PASSWORD=${DB_PASSWORD}
+      - REDIS_HOST=${CORE_REDIS_HOST}
+      - REDIS_PORT=${CORE_REDIS_PORT}
+      - PUSHER_HOST=coolify_soketi
+      - PUSHER_PORT=6001
+      - PUSHER_APP_ID=${DEV_COOLIFY_PUSHER_APP_ID}
+      - PUSHER_APP_KEY=${DEV_COOLIFY_PUSHER_APP_KEY}
+      - PUSHER_APP_SECRET=${DEV_COOLIFY_PUSHER_APP_SECRET}
+      - SSL_MODE=off
+    networks:
+      - compose_network
+    labels:
+      - 'traefik.enable=${DEV_TRAEFIK_ENABLED}'
+      # HTTP to HTTPS redirect
+      - 'traefik.http.middlewares.${DEV_COMPOSE_PROJECT_NAME}-coolify-redirect-web-secure.redirectscheme.scheme=https'
+      - 'traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-coolify-web.middlewares=${DEV_COMPOSE_PROJECT_NAME}-coolify-redirect-web-secure'
+      - 'traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-coolify-web.rule=Host(`${DEV_COOLIFY_TRAEFIK_HOST}`)'
+      - 'traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-coolify-web.entrypoints=web'
+      # HTTPS router
+      - 'traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-coolify-web-secure.rule=Host(`${DEV_COOLIFY_TRAEFIK_HOST}`)'
+      - 'traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-coolify-web-secure.tls.certresolver=resolver'
+      - 'traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-coolify-web-secure.entrypoints=web-secure'
+      - 'traefik.http.middlewares.${DEV_COMPOSE_PROJECT_NAME}-coolify-web-secure-compress.compress=true'
+      - 'traefik.http.routers.${DEV_COMPOSE_PROJECT_NAME}-coolify-web-secure.middlewares=${DEV_COMPOSE_PROJECT_NAME}-coolify-web-secure-compress,security-headers@file'
+      # Service
+      - 'traefik.http.services.${DEV_COMPOSE_PROJECT_NAME}-coolify-web-secure.loadbalancer.server.port=8000'
+      - 'traefik.docker.network=${NETWORK_NAME}'
+      # Watchtower
+      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'
+
+  # Coolify PostgreSQL
+  coolify_postgres:
+    image: postgres:15-alpine
+    container_name: ${DEV_COMPOSE_PROJECT_NAME}_coolify_postgres
+    restart: unless-stopped
+    volumes:
+      - coolify_postgres_data:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_USER=${DB_USER}
+      - POSTGRES_PASSWORD=${DB_PASSWORD}
+      - POSTGRES_DB=${DEV_COOLIFY_DB_NAME}
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${DB_USER}"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+    networks:
+      - compose_network
+
+  # Coolify Soketi (WebSocket server)
+  coolify_soketi:
+    image: quay.io/soketi/soketi:1.0.10-16-alpine
+    container_name: ${DEV_COMPOSE_PROJECT_NAME}_coolify_soketi
+    restart: unless-stopped
+    environment:
+      - SOKETI_DEFAULT_APP_ID=${DEV_COOLIFY_PUSHER_APP_ID}
+      - SOKETI_DEFAULT_APP_KEY=${DEV_COOLIFY_PUSHER_APP_KEY}
+      - SOKETI_DEFAULT_APP_SECRET=${DEV_COOLIFY_PUSHER_APP_SECRET}
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost:6001/ready"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+    networks:
+      - compose_network
+
 volumes:
   gitea_data:
     name: ${DEV_COMPOSE_PROJECT_NAME}_gitea_data
@@ -90,6 +185,10 @@ volumes:
     name: ${DEV_COMPOSE_PROJECT_NAME}_gitea_config
   gitea_runner_data:
     name: ${DEV_COMPOSE_PROJECT_NAME}_gitea_runner_data
+  coolify_data:
+    name: ${DEV_COMPOSE_PROJECT_NAME}_coolify_data
+  coolify_postgres_data:
+    name: ${DEV_COMPOSE_PROJECT_NAME}_coolify_postgres_data
 
 networks:
   compose_network: