deploy: production deployment for noema.dixon.cx

The systemd unit, nginx vhost, build-and-restart script and operator notes
for running Noema as a Docker container behind nginx against the host
PostgreSQL cluster. Secrets stay in /etc/noema/noema.env, outside the repo.

deploy/prod/build.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+# Build the Noema image and restart the systemd service. Run from anywhere.
+set -euo pipefail
+cd "$(dirname "$0")/../.."
+VERSION=$(git describe --tags --always --dirty 2>/dev/null || echo dev)
+docker build -f deploy/Dockerfile --build-arg VERSION="$VERSION" -t noema:"$VERSION" -t noema:latest .
+sudo systemctl restart noema
+sleep 3
+systemctl --no-pager --lines=5 status noema