feat(v5): add Inertia app shell with Flux health

Adds v5 routing, middleware, home page rendering, team context sharing,
project model/table support, and Flux health reporting. Installs Flux in
container builds with role-aware s6 services and documents runtime roles.

docker/development/Dockerfile

@@ -5,6 +5,8 @@ ARG SERVERSIDEUP_PHP_VERSION=8.4-fpm-nginx-alpine
 ARG MINIO_VERSION=RELEASE.2025-05-21T01-59-54Z
 # https://github.com/cloudflare/cloudflared/releases
 ARG CLOUDFLARED_VERSION=2025.7.0
+# https://github.com/coollabsio/coold/releases/tag/nightly
+ARG COOLIFY_FLUX_VERSION=nightly
 # https://www.postgresql.org/support/versioning/
 # Note: We are using version 18 of the postgres client (while still using postgres 15 for the postgres server) as version 15 has been removed from Alpine 3.23+ https://pkgs.alpinelinux.org/packages?name=postgresql*-client&branch=v3.23&repo=&arch=x86_64&origin=&flagged=&maintainer=
 ARG POSTGRES_VERSION=18
@@ -24,8 +26,10 @@ FROM serversideup/php:${SERVERSIDEUP_PHP_VERSION}
 ARG USER_ID
 ARG GROUP_ID
 ARG TARGETPLATFORM
+ARG TARGETARCH
 ARG POSTGRES_VERSION
 ARG CLOUDFLARED_VERSION
+ARG COOLIFY_FLUX_VERSION
 ARG NGINX_VERSION
 
 WORKDIR /var/www/html
@@ -58,6 +62,7 @@ RUN apk upgrade --no-cache && \
 RUN apk add --no-cache \
     postgresql${POSTGRES_VERSION}-client \
     openssh-client \
+    openssl \
     git \
     git-lfs \
     jq \
@@ -81,6 +86,28 @@ RUN mkdir -p /usr/local/bin && \
     fi && \
     chmod +x /usr/local/bin/cloudflared
 
+# Install Flux from coold nightly release based on architecture
+RUN set -eux; \
+    mkdir -p /usr/local/bin /run/coolify /etc/coolify; \
+    chown -R www-data:www-data /run/coolify /etc/coolify; \
+    case "${TARGETARCH:-}" in \
+        amd64|arm64) FLUX_ARCH="${TARGETARCH}" ;; \
+        "") \
+            case "$(uname -m)" in \
+                x86_64) FLUX_ARCH="amd64" ;; \
+                aarch64) FLUX_ARCH="arm64" ;; \
+                *) echo "unsupported Flux arch: $(uname -m)" >&2; exit 1 ;; \
+            esac ;; \
+        *) echo "unsupported Flux TARGETARCH: ${TARGETARCH}" >&2; exit 1 ;; \
+    esac; \
+    curl -fsSL --retry 3 --max-time 120 \
+        -o /tmp/flux.tar.gz \
+        "https://github.com/coollabsio/coold/releases/download/${COOLIFY_FLUX_VERSION}/flux-linux-musl-${FLUX_ARCH}.tar.gz"; \
+    tar -xzf /tmp/flux.tar.gz -C /tmp; \
+    test -f /tmp/flux; \
+    install -m 0755 /tmp/flux /usr/local/bin/flux; \
+    rm -f /tmp/flux /tmp/flux.tar.gz
+
 # Configure PHP
 COPY docker/development/etc/php/conf.d/zzz-custom-php.ini /usr/local/etc/php/conf.d/zzz-custom-php.ini
 ENV PHP_OPCACHE_ENABLE=0

docker/development/etc/s6-overlay/s6-rc.d/flux/run

@@ -0,0 +1,49 @@
+#!/bin/sh
+
+cd /var/www/html
+
+role="${COOLIFY_CONTAINER_ROLE:-}"
+if [ -z "$role" ]; then
+    role="$(grep -E '^COOLIFY_CONTAINER_ROLE=' .env 2>/dev/null | tail -n1 | cut -d= -f2- | tr -d '"' | tr -d "'")"
+fi
+role="${role:-all}"
+
+case "$role" in
+    all|flux) ;;
+    *)
+        echo "   INFO  Flux is disabled for role '$role', sleeping."
+        exec sleep infinity
+        ;;
+esac
+
+if grep -qE '^COOLIFY_FLUX_ENABLED=false' .env 2>/dev/null || [ "${COOLIFY_FLUX_ENABLED:-}" = "false" ]; then
+    echo "   INFO  Flux is disabled, sleeping."
+    exec sleep infinity
+fi
+
+export COOLIFY_FLUX_GRPC_BIND="${COOLIFY_FLUX_GRPC_BIND:-0.0.0.0:6443}"
+export COOLIFY_FLUX_UNIX_SOCKET_PATH="${COOLIFY_FLUX_UNIX_SOCKET_PATH:-/run/coolify/flux.sock}"
+export COOLIFY_FLUX_JWT_PRIVATE_KEY_PATH="${COOLIFY_FLUX_JWT_PRIVATE_KEY_PATH:-/var/www/html/storage/app/flux/jwt.priv}"
+export COOLIFY_FLUX_JWT_PUBLIC_KEY_PATH="${COOLIFY_FLUX_JWT_PUBLIC_KEY_PATH:-/var/www/html/storage/app/flux/jwt.pub}"
+export COOLIFY_FLUX_ALLOW_PUBLIC_BIND="${COOLIFY_FLUX_ALLOW_PUBLIC_BIND:-1}"
+
+if [ ! -r "$COOLIFY_FLUX_JWT_PUBLIC_KEY_PATH" ]; then
+    echo "   INFO  Flux JWT public key not found at $COOLIFY_FLUX_JWT_PUBLIC_KEY_PATH, generating keypair..."
+    mkdir -p "$(dirname "$COOLIFY_FLUX_JWT_PRIVATE_KEY_PATH")" "$(dirname "$COOLIFY_FLUX_JWT_PUBLIC_KEY_PATH")"
+    openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:P-256 -out "$COOLIFY_FLUX_JWT_PRIVATE_KEY_PATH.tmp"
+    chmod 0600 "$COOLIFY_FLUX_JWT_PRIVATE_KEY_PATH.tmp"
+    mv "$COOLIFY_FLUX_JWT_PRIVATE_KEY_PATH.tmp" "$COOLIFY_FLUX_JWT_PRIVATE_KEY_PATH"
+    openssl pkey -in "$COOLIFY_FLUX_JWT_PRIVATE_KEY_PATH" -pubout -out "$COOLIFY_FLUX_JWT_PUBLIC_KEY_PATH.tmp"
+    chmod 0644 "$COOLIFY_FLUX_JWT_PUBLIC_KEY_PATH.tmp"
+    mv "$COOLIFY_FLUX_JWT_PUBLIC_KEY_PATH.tmp" "$COOLIFY_FLUX_JWT_PUBLIC_KEY_PATH"
+fi
+
+if ! /usr/local/bin/flux --version >/dev/null 2>&1; then
+    echo "   ERROR  Flux binary cannot run in this container. Check that the installed coold nightly Flux artifact is compatible with Alpine."
+    exec sleep infinity
+fi
+
+mkdir -p "$(dirname "$COOLIFY_FLUX_UNIX_SOCKET_PATH")"
+
+echo "   INFO  Flux is enabled for role '$role', starting..."
+exec /usr/local/bin/flux

docker/development/etc/s6-overlay/s6-rc.d/flux/type

@@ -0,0 +1 @@
+longrun

docker/development/etc/s6-overlay/s6-rc.d/horizon/run

@@ -2,6 +2,20 @@
 
 cd /var/www/html
 
+role="${COOLIFY_CONTAINER_ROLE:-}"
+if [ -z "$role" ]; then
+    role="$(grep -E '^COOLIFY_CONTAINER_ROLE=' .env 2>/dev/null | tail -n1 | cut -d= -f2- | tr -d '"' | tr -d "'")"
+fi
+role="${role:-all}"
+
+case "$role" in
+    all|worker) ;;
+    *)
+        echo "   INFO  Horizon is disabled for role '$role', sleeping."
+        exec sleep infinity
+        ;;
+esac
+
 if grep -qE '^HORIZON_ENABLED=false' .env 2>/dev/null; then
     echo "   INFO  Horizon is disabled, sleeping."
     exec sleep infinity

docker/development/etc/s6-overlay/s6-rc.d/nightwatch-agent/run

@@ -2,6 +2,20 @@
 
 cd /var/www/html
 
+role="${COOLIFY_CONTAINER_ROLE:-}"
+if [ -z "$role" ]; then
+    role="$(grep -E '^COOLIFY_CONTAINER_ROLE=' .env 2>/dev/null | tail -n1 | cut -d= -f2- | tr -d '"' | tr -d "'")"
+fi
+role="${role:-all}"
+
+case "$role" in
+    all|worker) ;;
+    *)
+        echo "   INFO  Nightwatch is disabled for role '$role', sleeping."
+        exec sleep infinity
+        ;;
+esac
+
 if grep -qE '^NIGHTWATCH_ENABLED=true' .env 2>/dev/null; then
     echo "   INFO  Nightwatch is enabled, starting..."
     exec php artisan nightwatch:agent

docker/development/etc/s6-overlay/s6-rc.d/scheduler-worker/run

@@ -2,6 +2,20 @@
 
 cd /var/www/html
 
+role="${COOLIFY_CONTAINER_ROLE:-}"
+if [ -z "$role" ]; then
+    role="$(grep -E '^COOLIFY_CONTAINER_ROLE=' .env 2>/dev/null | tail -n1 | cut -d= -f2- | tr -d '"' | tr -d "'")"
+fi
+role="${role:-all}"
+
+case "$role" in
+    all|worker) ;;
+    *)
+        echo "   INFO  Scheduler worker is disabled for role '$role', sleeping."
+        exec sleep infinity
+        ;;
+esac
+
 if grep -qE '^SCHEDULER_ENABLED=false' .env 2>/dev/null; then
     echo "   INFO  Scheduler is disabled, sleeping."
     exec sleep infinity