chore: scaffold M0 — repo structure, ADRs, dev environment, pre-merge checklist

infrastructure/docker/docker-compose.dev.yml

@@ -0,0 +1,14 @@
+# Local development overrides only. Never referenced by Coolify — see docker-compose.prod.yml for that.
+services:
+  postgres:
+    ports:
+      - "5432:5432"
+
+  qdrant:
+    ports:
+      - "6333:6333"
+      - "6334:6334"
+
+  redis:
+    ports:
+      - "6379:6379"

infrastructure/docker/docker-compose.prod.yml

@@ -0,0 +1,12 @@
+# Scaffolded for Coolify (see ADR-003) — not yet connected to any live Coolify app.
+# No ports exposed here on purpose: production access goes through the reverse proxy,
+# never by publishing container ports directly.
+services:
+  postgres:
+    restart: always
+
+  qdrant:
+    restart: always
+
+  redis:
+    restart: always

infrastructure/docker/docker-compose.yml

@@ -0,0 +1,38 @@
+networks:
+  homelab_copilot:
+    driver: bridge
+
+volumes:
+  postgres_data:
+  qdrant_data:
+  redis_data:
+
+services:
+  postgres:
+    image: postgres:16-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-homelab_copilot}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env — never commit a real value}
+      POSTGRES_DB: ${POSTGRES_DB:-homelab_copilot}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    networks:
+      - homelab_copilot
+
+  qdrant:
+    image: qdrant/qdrant:latest
+    restart: unless-stopped
+    volumes:
+      - qdrant_data:/qdrant/storage
+    networks:
+      - homelab_copilot
+
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    command: ["redis-server", "--appendonly", "yes"]
+    volumes:
+      - redis_data:/data
+    networks:
+      - homelab_copilot