✨ Moved installations of the released main layout onto this one (S6b)

[acburdine]

closes https://linear.app/ghost/issue/PLA-482

Installations made from main update with git pull, and a pull across this layout breaks them. This adds migration 0001-compose-profiles, entered by the served launcher's self-update run inside the old checkout:

curl -fsSL https://docker.ghost.org/install.sh | bash -s -- self-update

What it does

Before changing anything (refusing with what to resolve):

• git shows tracked stack files unedited (work tree or unpushed commits)
• Ghost and MySQL running; official image; Ghost ≥ 6.61.0 (first next image)
• project name kept from Compose/containers, so volumes and Caddy certificates stay the site's
• Ghost pinned to ghost:<running version>-next-alpine by digest: same version
• .env split into .env + ghost.env, Ghost values as Ghost received them; unescaped $ in operator values refused
• caddy/Caddyfile kept as Caddyfile.local and carried as written into caddy/sites/site.caddy: {$DOMAIN}/{$ADMIN_DOMAIN}/{$ACTIVITYPUB_TARGET} filled in, import snippets/ pointed at main's own snippets kept in caddy/sites/legacy-snippets/, a leading global block lifted to caddy/global/legacy.caddy; bare upstreams left (they resolve on the site's network); loaded by caddy validate in the site's Caddy image
• overrides resolved with the new layout; release images pulled while the site runs
• ActivityPub stays where main sent it (hosted unless ACTIVITYPUB_TARGET said otherwise)

Then: snapshot, pause Ghost/ActivityPub, write layout + metadata, checked backup, start, verify through Caddy. Recovery follows self-update's boundary: before startup, files back and writers resumed; after, services stopped, main's files back, data left for the operator. Metadata written last is the only completion record; a second run is an ordinary self-update.

Also ports main's TINYBIRD_SYNC_AUTH (#332), which landed after next-docker was cut and would otherwise be lost by the migration.

Deferred

• No general migration framework or journal: this one migration needs none.
• No IPv6 network detection: compose.ipv6.yml used with -f by hand must be passed via GD_COMPOSE_OVERRIDES (documented).
• Installs without .git are refused (edits can't be told apart).
• tests/fixtures/released-main must be refreshed from main's final commit before S12 merges (added to the roadmap).

Tests

• Unit: translation, split, and the migration under the scripted daemon (refusals, success, rerun, --check, failure before and after startup).
• tests/e2e/migrate-main.sh + migrate-main-linux CI job: real main-layout clone with ActivityPub, custom route, global block and override; edited file and unpullable image refused; unhealthy start recovered and main restarted on its data; served-launcher migration verified; rerun no-op. Not run locally — first run is this CI.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Essentials
• Run ID: dc9ffafc-c401-4e93-8acb-5d7e7a919fe1

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}