Build, deploy and configuration

apps/
  admin-console/      Vite multi-page + React Router, Admin portal
  portal/             Vite multi-page + React Router, Trainer and Trainee, role-branched
  mobile/             Flutter (go_router, dio)
services/
  api/                Express REST API, middleware chain, handlers
  ai-service/         Python: extraction, chunking, embedding, workers
  pdf-service/        thin wrapper around Gotenberg
packages/
  db/                 Drizzle schema, migrations, sql/ (RLS, indexes)
  ui/                 shared component set
  types/              shared TS types
infra/
  docker-compose.yml
  nginx/              per-section try_files, rate limits
  cron/               snapshot.sh, restore-check.sh
turbo.json            pnpm + Turborepo workspace

services:
  nginx:      { image: nginx:stable, ports: ["80:80", "443:443"], depends_on: [api] }
  api:        { build: ./services/api, env_file: .env, volumes: ["appdata:/data"],
                depends_on: [postgres, gotenberg] }
  ai-service: { build: ./services/ai-service, env_file: .env, volumes: ["appdata:/data:ro"],
                depends_on: [postgres] }
  gotenberg:  { image: gotenberg/gotenberg:8 }            # no ports: internal network only
  postgres:   { image: pgvector/pgvector:pg17, volumes: ["pgdata:/var/lib/postgresql/data"] }
  # Ollama runs on the host to use the GPU: OLLAMA_HOST=http://host.docker.internal:11434
volumes: { appdata: {}, pgdata: {} }