chore: remove embedded Postgres, Redis, secrets from Docker image

[brendan-kellam]

Fixes SOU-1269

Summary

As part of the v5 release, this removes the Postgres and Redis that were bundled inside the shipped Docker image. External Postgres and Redis are now required and must be provided via DATABASE_URL and REDIS_URL. The image now contains only the app (web + backend + zoekt).

Compose and Helm deployments already run their own Postgres/Redis, so they are unaffected. Only deployments that relied on the embedded services (typically a bare docker run without DATABASE_URL/REDIS_URL) need to migrate.

Changes

• Dockerfile: drop postgresql16, postgresql16-contrib, and redis packages; remove DATABASE_DATA_DIR/REDIS_DATA_DIR env vars; remove the postgres/redis users and the /run/postgresql setup.
• entrypoint.sh: when DATABASE_URL or REDIS_URL is unset, hard-fail with a clear error pointing at the migration guide instead of falling back to embedded mode; remove the initdb, data-dir init, and embedded-postgres startup blocks.
• supervisord.conf: remove the redis program (zoekt/web/backend remain).
• Docs:
  • environment-variables.mdx: mark DATABASE_URL/REDIS_URL as required; remove the DATABASE_DATA_DIR/REDIS_DATA_DIR rows.
  • v4-to-v5-guide.mdx: document the breaking change, who's affected, and step-by-step pg_dump/pg_restore data migration.
• CHANGELOG.md: breaking-change entry under [Unreleased] → Changed.

Notes

• App code (packages/shared/db.ts, web/prisma.ts, backend/redis.ts) is untouched — it never branched on embedded mode.
• docker-compose.yml needs no change; it already runs external Postgres (:16, matching the previously-bundled version) and Redis with the URLs injected.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 7fd85c62-5294-41c1-82ce-839165765f6f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch brendan/remove-embedded-postgres-redis-SOU-1269

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[brendan-kellam]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.