✨ Added production site import, with the cutover documented (S5e)

[acburdine]

ref https://linear.app/ghost/issue/PLA-479/s5e-production-import-and-cutover

install --import now accepts bundles of production Ghost-CLI sites. The cutover itself is documented, not automated, as decided on 2026-10-07.

What the import does

• Installs the bundle as an ordinary production site (Ghost, MySQL, Caddy), on the hosts of the bundle's url and adminUrl. --domain, --admin-domain and --email override them.
• Refuses a source URL Caddy can't serve as it is (plain http, a port, a path) before anything is written. The message names the --domain that would serve the site at that host's root, which changes its address.
• On a domain other than the source's, drops the source's admin domain with a warning, so a rehearsal copy never claims the live admin domain.
• Refuses --domain/--admin-domain/--email with a local bundle, --local or --with mailpit with a production bundle, and portable production bundles (the message points to the Ghost Admin route).
• Keeps the failure contract and "never stop anything" unchanged: where nginx still holds 80/443, Caddy fails to start, the error names the port, and the import removes what it created.
• Leaves mail, Mailgun and Stripe settings in place, because a move needs them.

Docs

docs/install.md covers importing a production site and moving one: on the same server (stop nginx yourself; how to recover if the import fails; disable nginx and the ghost_* unit afterwards), to another host (DNS), and as a rehearsal copy. The rehearsal steps clear mail__*/bulkEmail__* from ghost.env and the Mailgun/Stripe settings and webhooks from the database. The setting names were checked against Ghost's schema.

Testing

• manager: format, lint, typecheck and unit tests pass (482).
• New tests/e2e/production-import.sh in CI (Production import on Linux). It installs a real Ghost-CLI production source (MySQL, systemd, nginx on 80, admin domain), then:
  • forces a failure by importing with nginx still running, and checks the directory is untouched and the documented recovery works;
  • performs the documented same-server move, then checks the exact version, staff sign-in on the admin domain, the post, the image and the config through Caddy, plus check.
• It changes the host, so it refuses to run without GD_TEST_HOST_CHANGES=1. It hasn't run anywhere yet; this PR's CI is its first run.
• The cross-host move stays a manual acceptance run.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: 2f15511e-e7ac-4682-a5b8-8c1755696e0f

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}