functional deployment without SSO for trade-hub

roles/trade_hub/defaults/main.yml

@@ -15,6 +15,16 @@ trade_hub_postgres_image: docker.io/library/postgres:16-alpine
 trade_hub_build_images: true
 trade_hub_force_rebuild: false
 
+# Directories created under trade_hub_app_dir before the source is staged.
+# ansible.builtin.copy does NOT create parent directories for single-file
+# sources, so every directory a staged file lands in must exist first.
+trade_hub_app_subdirs:
+  - backend
+  - backend/app
+  - backend/scripts
+  - frontend
+  - frontend/src
+
 # Container names. Kept compatible with the previous standalone playbook so an
 # existing installation is upgraded in place.
 trade_hub_db_container: sc-inventory-db
@@ -24,7 +34,7 @@ trade_hub_frontend_container: sc-inventory-frontend
 # Database.
 trade_hub_postgres_user: sc_inventory
 trade_hub_postgres_db: sc_inventory
-trade_hub_postgres_password: "{{ lookup('env', 'POSTGRES_PASSWORD') | default('sc_inventory_dev', true) }}"
+trade_hub_postgres_password: "{{ lookup('env', 'POSTGRES_PASSWORD') | default(trade_hub_postgres_pw, true) }}"
 trade_hub_database_url: "postgresql+psycopg://{{ trade_hub_postgres_user }}:{{ trade_hub_postgres_password }}@db:5432/{{ trade_hub_postgres_db }}"
 trade_hub_db_wait_seconds: 60
 
@@ -32,7 +42,12 @@ trade_hub_db_wait_seconds: 60
 trade_hub_network: sc-inventory
 trade_hub_volume: sc-inventory-data
 trade_hub_frontend_bind: 0.0.0.0
-trade_hub_frontend_port: 8080
+# Published on the host and used as the container's nginx listen port. Nginx
+# Proxy Manager proxies to http://<trade_hub_frontend_ip>:<trade_hub_frontend_port>.
+trade_hub_frontend_port: 8071
+# Static address for the frontend on the shared npm_internal proxy network
+# (created by the "network" role), so the proxy-manager upstream never changes.
+trade_hub_frontend_ip: "10.10.0.5"
 # Set to true (or "true") once the site is served over TLS.
 trade_hub_cookie_secure: "false"