Preprod infrastructure (v7, on demand, Exoscale) Diagram

On demand

terraform apply -var preprod=true creates preprod-data + preprod-app; false destroys them, the elastic IP stays
-var preprod_forum=true / preprod_replica=true add the optional VMs
Same compositions and images as production (composition/v7), other variables and secrets
All preprod VMs sit on their own VPC subnet and security group; only the bastion is in both the production and the preprod group

Real data, guarded

Database = production dump with third-party tokens and SSO keys removed (preprod-scrub.sql)
No mail (no SMTP credentials); reCAPTCHA uses Google's test keys
A v6_api PR preview (-e preprod_api_version=<tag>) runs against these data
Writes never reach production: own buckets, own keys, forum off by default
With the replica VM, preprod-data also archives its WAL (WAL-G) to c2corg-preprod-backups

Borrowed from production

forum.preprod: read-only proxy of the public forum; HTML pages redirect to it
media: missing file → 302 to media.camptocamp.org (not for /c2corg-dem/)
tracking: the production one, user ids of preprod tokens shifted by 1e9
Tracker OAuth goes through the production return URL (UI relay)

Everyday

deploy.yml --limit preprod: API, images, workers, UI (fast path)
site.yml --limit preprod: everything else, and after each data load
HAProxy follows recreated containers via Docker DNS, no restart