Deploy: a release that adds a service must actually start it

Three things stood between v1.1.0 and a working anti-spam engine on an existing
install, each silent:

`update` rolled only worker-sync, worker-jobs, api and web. A release that adds
a service — this one adds two — would report success while never creating it.
It now converges the rest with `up -d --no-recreate`, which creates what is
absent and leaves the rolled services alone.

.env.prod.example pinned ENABLED_PLUGINS to the four plugins that existed when it
was written. The entrypoint's default includes antispam, but an explicit value in
.env wins, so migrate would skip the plugin's tables and every antispam request
would fail at runtime rather than at install. The template is fixed for new
installs; `doctor` now warns existing ones, comparing .env against the
entrypoint's default so there is still one list, not two.

And the runbook now documents what the engine costs (~150-300 MB), that nothing
depends on it by design, that `init` must be re-run for the controller password,
and that its Bayes database is derived data like the search index.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018SqJYt7jD7oUEkoY68sBZo

This commit is contained in:

lukas

2026-09-17 20:44:25 +02:00

co-authored by

Claude Opus 5

parent 5aa133e18c

commit b54ccbe653

3 changed files with 45 additions and 2 deletions

									
										docker/.env.prod.example
									
		+1
		-1
	
												View File
												
				@@ -97,7 +97,7 @@ OAUTH_MS_CLIENT_SECRET=

				# Plugins whose schema is migrated on every start. Remove one to stop shipping

				# its tables; `hello` is the SDK demo and is intentionally not listed.

				ENABLED_PLUGINS="calendar contacts labels filters"

				ENABLED_PLUGINS="calendar contacts labels filters antispam"

				# --- Backups ----------------------------------------------------------------

				BACKUP_AT=03:30