Releases: the whole built checkout; storage/ and .env are shared across releases; config/route/view/event:cache are built per release, then the release is health-gated through the real PHP-FPM pool before current flips. No PHP-FPM reload per deploy (opcache is keyed per release path).
<% } %>
<% if (capabilities && capabilities.db) { %>
Database — MariaDB on this server, loopback only
<% if (dbInfo) { %>
Database
<%= dbInfo.database %> <% if (!dbInfo.managed) { %>(external — not provisioned here)<% } %>
From your workstation: ssh -L 3306:127.0.0.1:3306 deploy@<this server>, then connect any client to localhost:3306 with these credentials. Nightly dumps in /srv/paas/backups/db (last 7 kept).
<% if (dbInfo.managed) { %>
<% } %>
<% } else { %>
No database yet. Creates <%= p.name.replace(/-/g, '_') %> with a dedicated user and writes DB_CONNECTION/DB_HOST/DB_PORT/DB_DATABASE/DB_USERNAME/DB_PASSWORD<%= isLaravel ? '' : ' and DATABASE_URL' %> into the environment.
re-attempts certificate issuance for domains whose DNS was fixed after creation
Point DNS at 188.40.238.163 before adding — certificates are issued automatically.
<% if (customDomains.length) { %>
Domain rules
Restrict a specific domain to only serve certain paths (everything else 404s on that host) and/or keep it out of search results — useful for a secondary marketing/campaign domain that should only expose a handful of landing pages instead of the whole site.
Re-checks (and re-adds if missing) the read-only deploy key and the push webhook on the repository.
<% } else if (p.repo_url) { %>
<%= p.repo_url %>
Manual repository — add the webhook and deploy key below to the repository yourself.
<% } else { %>
No repository connected yet — this project currently deploys from ZIP uploads only.
<% } %>
Connect / change repository
Webhook
<%= webhookUrl %>
GitHub: Settings → Webhooks → add the URL, content type application/json, and set the webhook Secret to <%= p.webhook_secret %> (verified via X-Hub-Signature-256).
GitLab: Settings → Webhooks → add the URL and put the same secret into Secret token (sent as X-Gitlab-Token).
Gitea: add the URL and set the webhook secret (HMAC verified via X-Gitea-Signature).
Generic / Bitbucket: the secret embedded in the URL is enough — keep the URL private.
Only pushes to branch <%= p.branch %> trigger a deployment<% if (!p.auto_deploy) { %> — currently ignored, Auto-deploy is off (Overview card)<% } %>. Change the branch in the Overview card; the change applies to the next deployment, it does not deploy by itself.
Deploy key
Add this public key to the repository (read-only deploy key) if it is private.
<% if (deployKey) { %>
<%= deployKey %>
<% } else { %>
No deploy key found at the configured path.
<% } %>
Environment variables
<% if (p.multi_label) { %>
Label preset — fills NUXT_SITE=<%= p.name %>, a fresh purge secret and this app's domain;