coolify-deploy

Automate Coolify deployments on a DigitalOcean droplet using a policy-driven workflow that provisions Postgres and Redis, configures Traefik routing, and enforces staging gates before production. It generates Dockerfiles, docker-compose files, and Let's Encrypt SSL setups to ensure configuration integrity.

Manage secrets and environment variables in Coolify through a centralized, policy-driven governance model that supports secure secret rotations. The workflow enforces operator approval for production deployments and maintains auditable operations alongside automated nightly backups to DigitalOcean Spaces.

Direct production deploys without operator approval are disallowed by the first-deploy gate. The workflow mandates a staged deployment process, requiring successful staging validation and explicit operator review before any application or service is pushed to the production environment.

Configure Traefik routing and Let's Encrypt SSL for Coolify services through automated generation and validation of routing configurations. The workflow handles Dockerfile and docker-compose provisioning, automatically applying SSL certificates and routing rules for new services deployed on the droplet.

This Coolify deployment workflow fully supports droplet upgrades and nightly backups through built-in runbook generation and policy-driven safeguards. It performs automated daily backups to DigitalOcean Spaces and provides structured guidance for safely upgrading droplets and rotating secrets.

Your Coolify deployment requires a staging environment first to prevent unreviewed production pushes and ensure configuration integrity. The mandatory first-deploy gate acts as a safeguard, validating Dockerfile, Traefik, and database configurations before allowing any production release.