fix(deploy): make the prod compose profile boot out of the box

[CybotTM]

Summary

COMPOSE_PROFILES=prod docker compose up -d never served a page. Three stacked defects, found while verifying the deployment guide in #494:

1. nginx upstream mismatch — docker/nginx/default.conf forwards FastCGI to phpfpm:9000, but no service or network alias with that name existed → 502 for every PHP request. The app service now carries a phpfpm network alias.
2. Missing .env in the production image — bin/console / public/index.php boot Symfony Dotenv unconditionally and it throws when the file is absent → the auto-migration entrypoint died before PHP-FPM ever started ([entrypoint] ERROR: database not reachable after 60s). The image now ships an empty .env; all runtime configuration comes from real environment variables.
3. Compose interpolation leak — APP_ENV=${APP_ENV:-prod} picked up dev from the repository's committed Symfony .env, overriding the image's ENV APP_ENV=prod. Those lines are removed (image defaults rule) and the variables the app actually needs (DATABASE_URL, APP_SECRET, LDAP_*, branding, SENTRY_DSN) are passed through explicitly, with defaults matching the bundled db service. APP_ENCRYPTION_KEY is a bare passthrough because an empty string would defeat its env(default:secret:…) fallback.

The deployment guide's workaround note is replaced by the actual behavior.

Verification

Rebuilt the production image (docker buildx bake app) and booted the prod profile without the dev override:

• before: 502 on /login, entrypoint loop database not reachable after 60s
• after: /login → 200, /status/check → {"loginStatus":false}, FPM up, auto-migration completed

[gemini-code-assist]

Code Review

This pull request configures the production Docker image to ship with an empty .env file and updates compose.yml to pass through all necessary runtime configuration environment variables. It also adds a phpfpm network alias to the app service, simplifying the deployment guide. The review feedback correctly points out that the AUTO_MIGRATE environment variable was omitted from the compose.yml environment list, which prevents users from opting out of automatic database migrations.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[Copilot]

Pull request overview

This PR fixes production deployment defaults so COMPOSE_PROFILES=prod docker compose up -d serves the Symfony app correctly without requiring extra overrides, aligning runtime configuration with image-baked defaults and Compose wiring.

Changes:

• Add a phpfpm network alias to the app service to match nginx’s fastcgi_pass phpfpm:9000.
• Ensure the production image contains an empty .env so Symfony Dotenv bootstrapping doesn’t crash when the file is absent.
• Adjust prod-profile Compose env handling to avoid unintended APP_ENV/APP_DEBUG overrides and document the updated behavior.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
docs/DEPLOYMENT_GUIDE.md	Updates deployment guidance to reflect prod profile working without nginx alias overrides and with env-vars-driven config.
Dockerfile	Ships an empty .env in the production image to prevent Dotenv startup failures.
compose.yml	Aligns prod service wiring (env vars + network alias) with nginx and image defaults.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.15%. Comparing base (bffc004) to head (5bb715b).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #496   +/-   ##
=========================================
  Coverage     84.15%   84.15%           
  Complexity     2814     2814           
=========================================
  Files           187      187           
  Lines          7588     7588           
=========================================
  Hits           6386     6386           
  Misses         1202     1202           

Flag	Coverage Δ
integration	53.14% <ø> (ø)
unit	49.51% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud