fix prod ddeployment

scripts/docker-prod-common.sh

@@ -50,9 +50,63 @@ traefik_compose() {
 start_prod_services() {
   ensure_env_file
   ensure_api_uploads_volume
+
+  local services=("$@")
+  local needs_migrations=0
+
+  for service in "${services[@]}"; do
+    case "${service}" in
+      api|marketplace|dashboard|admin)
+        needs_migrations=1
+        break
+        ;;
+    esac
+  done
+
+  if [[ ${needs_migrations} -eq 1 ]]; then
+    prod_compose up --build -d postgres redis
+    wait_for_healthy postgres 120
+    prod_compose run --rm --build migrate
+  fi
+
   prod_compose up --build -d "$@"
 }
 
+require_release_image() {
+  if [[ -z "${APP_IMAGE:-}" || -z "${APP_VERSION:-}" ]]; then
+    echo "APP_IMAGE and APP_VERSION must be set for pull-based production deploys." >&2
+    exit 1
+  fi
+}
+
+login_registry_if_configured() {
+  local configured=0
+
+  [[ -n "${REGISTRY_HOST:-}" ]] && configured=$((configured + 1))
+  [[ -n "${REGISTRY_USER:-}" ]] && configured=$((configured + 1))
+  [[ -n "${REGISTRY_PASSWORD:-}" ]] && configured=$((configured + 1))
+
+  if [[ ${configured} -eq 0 ]]; then
+    return 0
+  fi
+
+  if [[ ${configured} -ne 3 ]]; then
+    echo "REGISTRY_HOST, REGISTRY_USER, and REGISTRY_PASSWORD must either all be set or all be unset." >&2
+    exit 1
+  fi
+
+  echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY_HOST}" -u "${REGISTRY_USER}" --password-stdin
+}
+
+pull_prod_release_images() {
+  require_release_image
+  prod_compose pull migrate api marketplace dashboard admin
+}
+
+run_prod_migrations() {
+  prod_compose run --rm migrate
+}
+
 wait_for_healthy() {
   local service="$1"
   local timeout="${2:-120}"