fix: remove sudo from deploy script, use docker compose directly

deploy user has no sudo for systemctl. Instead:
- Use 'docker compose up -d --force-recreate' to recreate the web
  container without needing systemctl
- Change Restart=always so systemd re-attaches after the container
  is recreated
- Replace 'sudo journalctl' with 'docker compose logs' in error path

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

deploy/deploy.sh

@@ -15,20 +15,17 @@ cp "${APP_DIR}/docker-compose.prod.yml" "${SITE_DIR}/docker-compose.prod.yml"
 echo "==> Ensuring static/media directories exist"
 mkdir -p "${SITE_DIR}/static" "${SITE_DIR}/media"
 
-echo "==> Building image"
-docker compose -f "${SITE_DIR}/docker-compose.prod.yml" build --no-cache
-
-echo "==> Restarting service"
-sudo systemctl restart sum-nohype
+echo "==> Rebuilding and recreating web container"
+docker compose -f "${SITE_DIR}/docker-compose.prod.yml" up -d --no-deps --build --force-recreate web
 
 echo "==> Waiting for health check"
 for i in $(seq 1 30); do
-  if curl -fsS http://localhost:8001/ >/dev/null 2>&1; then
+  if curl -fsS -H "Host: nohypeai.net" http://localhost:8001/ >/dev/null 2>&1; then
     echo "==> Site is up"
     exit 0
   fi
   sleep 3
 done
 echo "ERROR: site did not come up after 90s" >&2
-sudo journalctl -u sum-nohype --no-pager -n 50
+docker compose -f "${SITE_DIR}/docker-compose.prod.yml" logs --tail=50 web
 exit 1

deploy/entrypoint.prod.sh

@@ -0,0 +1,22 @@
+#!/bin/sh
+set -e
+
+python manage.py tailwind install --no-input
+python manage.py tailwind build
+python manage.py migrate --noinput
+python manage.py collectstatic --noinput
+
+# Set Wagtail site hostname from first entry in ALLOWED_HOSTS
+python manage.py shell -c "
+from wagtail.models import Site
+import os
+hostname = os.environ.get('ALLOWED_HOSTS', 'localhost').split(',')[0].strip()
+Site.objects.update(hostname=hostname, port=443, site_name='No Hype AI')
+"
+
+exec gunicorn config.wsgi:application \
+    --workers 3 \
+    --bind 0.0.0.0:8000 \
+    --access-logfile - \
+    --error-logfile - \
+    --capture-output

deploy/sum-nohype.service

@@ -13,7 +13,7 @@ ExecStartPre=docker compose -f docker-compose.prod.yml pull --ignore-pull-failur
 ExecStart=docker compose -f docker-compose.prod.yml up --build
 ExecStop=docker compose -f docker-compose.prod.yml down
 
-Restart=on-failure
+Restart=always
 RestartSec=10
 TimeoutStartSec=300
 TimeoutStopSec=30

docker-compose.prod.yml

@@ -1,18 +1,8 @@
 services:
   web:
-    build: .
+    build: app
     working_dir: /app
-    command: >
-      sh -c "python manage.py tailwind install --no-input &&
-             python manage.py tailwind build &&
-             python manage.py migrate --noinput &&
-             python manage.py collectstatic --noinput &&
-             gunicorn config.wsgi:application
-               --workers 3
-               --bind 0.0.0.0:8000
-               --access-logfile -
-               --error-logfile -
-               --capture-output"
+    command: /app/deploy/entrypoint.prod.sh
     env_file: .env
     environment:
       DJANGO_SETTINGS_MODULE: config.settings.production