Fix production deployment: preserve .env file + add missing volume + simplified pipeline

env-production.template

@@ -0,0 +1,52 @@
+# =============================================================================
+# PRODUCTION ENVIRONMENT VARIABLES
+# =============================================================================
+# This template shows the required environment variables for production.
+# 
+# SETUP INSTRUCTIONS:
+# 1. SSH into production server: ssh user@your-server-ip
+# 2. Navigate to stiftung directory: cd /opt/stiftung
+# 3. Copy this template: cp env-production.template .env
+# 4. Edit with real values: nano .env
+# 5. Set secure permissions: chmod 600 .env
+# 
+# IMPORTANT: Once created, this file will NEVER be overwritten by git deployments!
+# The .env file is in .gitignore and will be preserved across all future deployments.
+# =============================================================================
+
+# DATABASE CONFIGURATION
+POSTGRES_DB=stiftung
+POSTGRES_USER=stiftung
+POSTGRES_PASSWORD=your_secure_database_password_here
+DB_HOST=db
+DB_PORT=5432
+
+# DJANGO CONFIGURATION
+DJANGO_SECRET_KEY=your_50_character_secret_key_here
+DJANGO_DEBUG=False
+DJANGO_ALLOWED_HOSTS=www.vhtv-stiftung.de,vhtv-stiftung.de
+LANGUAGE_CODE=de-de
+TIME_ZONE=Europe/Berlin
+
+# REDIS CONFIGURATION
+REDIS_URL=redis://redis:6379/0
+
+# PAPERLESS CONFIGURATION
+PAPERLESS_API_URL=http://paperless:8000/api
+PAPERLESS_API_TOKEN=your_paperless_api_token_here
+PAPERLESS_SECRET_KEY=your_paperless_secret_key_here
+PAPERLESS_ADMIN_USER=admin
+PAPERLESS_ADMIN_PASSWORD=your_paperless_admin_password_here
+PAPERLESS_ADMIN_MAIL=admin@vhtv-stiftung.de
+
+# GRAMPS WEB CONFIGURATION
+GRAMPSWEB_SECRET_KEY=your_grampsweb_secret_key_here
+GRAMPSWEB_ADMIN_EMAIL=admin@vhtv-stiftung.de
+GRAMPSWEB_ADMIN_PASSWORD=your_grampsweb_admin_password_here
+
+# =============================================================================
+# GENERATE SECRET KEYS:
+# =============================================================================
+# Django Secret Key: python -c "from django.core.management.utils import get_random_secret_key; print(get_random_secret_key())"
+# Paperless Secret: openssl rand -base64 32
+# GrampsWeb Secret: openssl rand -base64 32