[wax911]

AniTrend's current deployment path combines generated Swarm stacks, service-local Compose configuration and a Doco-CD runner. This proposal defines the phased move to Pulumi, a small Ansible baseline and Dokploy, with private administration, repeatable releases and tested data recovery.

Tracks #652. The linked roadmap contains 15 core implementation issues (#653 through #667) and one optional gateway evaluation (#668).

Source of truth

• Implementation plan and issue/dependency table
• Agent execution contract
• Machine-readable work graph

The documentation includes the source-verified baseline, ownership ADR, local Docker and full-host validation contracts, secret/network boundaries, release gates, backup/restore requirements and data-safe cutover/rollback. Each issue includes context, prerequisites, source paths, deliverables, acceptance tests, evidence and downstream links.

APISIX stays in place for the core migration. Local Docker validation and a disposable real Hetzner rehearsal precede production cutover. Service-local sources remain authoritative through their ownership handoff.

Validation

• Read back all 10 changed documentation/metadata files and all 17 tracker/work issues; contents and links match the published plan.
• Validated the acyclic dependency graph, 15-core/1-optional split, relative documentation links, source paths and required issue fields.
• Existing repository CI passed for d7e0add6242b.
• The diff changes documentation and the work graph only.

Runtime acceptance is explicitly pending: Docker CLI/context were detected but this session could not access the daemon socket, and Pulumi/Ansible were unavailable on PATH. Issue #654 establishes the real local lab. No production migration or cloud provisioning was performed.