Merge next into main: every setting upaas reads in the README, UPAAS_PORT in the Compose file (#232)

Reviewed-on: #232

.dockerignore

@@ -1,8 +1,11 @@
-# .git is sent so that `make build` in the Dockerfile can stamp the commit into
+.git
-# upaas. List no tracked file here: git would see it as deleted in the build and
-# the version would end in -dirty.
 .env
 bin/
+.editorconfig
 .vscode/
 .idea/
 *.test
+LICENSE
+CONVENTIONS.md
+REPO_POLICIES.md
+README.md

Dockerfile

@@ -31,7 +31,6 @@ RUN go mod download
 COPY . .
 
 RUN make test
-# Takes the version from `git describe` on the .git copied in above.
 RUN make build
 
 # Runtime stage

README.md

@@ -226,10 +226,6 @@ This recipe serves plain HTTP, so `UPAAS_PLAINTEXT_HTTP=true` is required for
 setup and every other form to pass the CSRF origin check. Behind a
 TLS-terminating reverse proxy, drop that line.
 
-The image shows the commit it was built from (the `git describe` output) in the
-page footer, the startup log and `/health`. Build it from a git clone: without
-the `.git` directory it shows `dev`.
-
 ### Deploying with Docker Compose
 
 [`docker-compose.yml`](docker-compose.yml) builds the image from this repo and
@@ -245,9 +241,7 @@ Other settings from [Configuration](#configuration) go in the same file, except
 settings to 8080 and `UPAAS_DATA_DIR` to `/var/lib/upaas`, overriding `.env`, to
 match its port mapping, healthcheck and data directory mount. Then run
 `docker compose up -d` from the repo root; `docker compose ps` shows the
-container as healthy once `/health` answers. To update, run `git pull` and then
+container as healthy once `/health` answers.
-`docker compose up -d --build`: without `--build`, Compose keeps running the
-image built from the old checkout.
 
 **Important**: `HOST_DATA_DIR` **must** be an **absolute path** on the host. It
 is bind-mounted into the container and passed as `UPAAS_HOST_DATA_DIR` so that
@@ -263,24 +257,9 @@ Docker's build cache rather than as untagged images. Docker Engine 28.2 and
 later keeps that cache under a size limit by default; on older engines, set
 `"builder": {"gc": {"enabled": true}}` in the host's `daemon.json`.
 
-Building with BuildKit needs Docker Engine 18.09 or later; on an older engine,
-upaas fails the deploy instead of building. A Dockerfile that uses
-`RUN --network` needs Docker Engine 23.0 or later unless its `# syntax=` line
-names Dockerfile frontend 1.3 or later, such as `docker/dockerfile:1`.
-
 Session secrets are automatically generated on first startup and persisted to
 `$UPAAS_DATA_DIR/session.key`.
 
-### Volume mounts
-
-An app's volume mounts are bind mounts of host paths. When a host path does not
-exist yet, upaas has Docker create it as an empty directory, owned by root, when
-the app's container starts; there is no need to create it first. An existing
-host path is left as it is. This needs Docker Engine 23.0 or later.
-
-A deploy or rollback replaces the app's container with a new one, which keeps
-only the files the app wrote to its volume mounts.
-
 ## License
 
 WTFPL

TODO.md

@@ -20,56 +20,6 @@ regress.
 
 # Completed Steps
 
-- 2026-10-01: Two database writes at the same moment no longer fail with
-  "database is locked": each transaction now takes the write lock when it begins
-  and waits up to 5 seconds for another writer to finish (#253).
-
-- 2026-10-01: The hint under the app page's environment variable editor now says
-  changes take effect at the next deploy or rollback, in the page's warning
-  style, instead of asking for a container restart, which keeps the old values
-  (#255).
-
-- 2026-10-01: An app with no volume mounts says on its page, and in the log of
-  each deploy, that a deploy or rollback loses the files it writes and a restart
-  keeps them; the README's Volume mounts section says a deploy or rollback keeps
-  only the files the app wrote to its volume mounts (#248).
-
-- 2026-10-01: Builds attach a BuildKit session, as the docker command line does,
-  so a base image that is not on the host is pulled instead of the build failing
-  with "no active sessions" on Docker Engine 27. Container logs, and so the
-  clone output in the build log and the app logs, no longer carry Docker's
-  stream frame headers, and the commit is now read from the clone output (#251).
-
-- 2026-10-01: An app's first deploy no longer fails when a volume's host path
-  does not exist yet: upaas asks Docker to create a missing host path when the
-  app's container starts and to leave an existing one alone, so nobody has to
-  create it on the host first. The README has a Volume mounts section saying so
-  (#235).
-
-- 2026-09-29: The app page is 50% wider on large screens (84rem instead of
-  56rem), its build log and container log boxes are twice as tall, the build log
-  sits between the webhook URL and the environment variables, and the container
-  log sits above the deploy key (#246).
-
-- 2026-09-29: A failed build now fails the deploy with the build's own error
-  instead of a later "failed to inspect image", and the deployment log shows the
-  end of the build output before that error. upaas refuses to build on a Docker
-  Engine older than 18.09, which cannot build with BuildKit. The README's
-  Compose section says to update with `docker compose up -d --build` and names
-  the Docker Engine versions builds need (#234).
-
-- 2026-09-29: An image built from the `Dockerfile` now shows the commit it was
-  built from (the `git describe` output) in the footer and `/health` instead of
-  `dev`: `.dockerignore` no longer leaves out `.git`, nor any tracked file,
-  which git would count as deleted and mark `-dirty`. upaas now also logs its
-  version at startup; the logger's `Identify()` was never called (#236).
-
-- 2026-09-29: The app page shows the app's branch as a label in its title, next
-  to the status badge, instead of after the repository under it (#240).
-
-- 2026-09-29: An app's deployments page now lists only its 10 most recent
-  deployments, newest first, instead of 50 (#238).
-
 - 2026-09-29: `docker-compose.yml` now sets `UPAAS_PORT` to 8080 as well as
   `PORT`, since upaas reads `UPAAS_PORT` first and a `UPAAS_PORT` in `.env` made
   it listen away from the port mapping and healthcheck; the README's Compose

cmd/upaasd/main.go

@@ -52,8 +52,6 @@ func main() {
 			handlers.New,
 			server.New,
 		),
-		fx.Invoke(func(log *logger.Logger, _ *server.Server) {
+		fx.Invoke(func(*server.Server) {}),
-			log.Identify()
-		}),
 	).Run()
 }

internal/database/database.go

@@ -137,11 +137,8 @@ func (d *Database) connect(ctx context.Context) error {
 		return fmt.Errorf("failed to create data directory: %w", err)
 	}
 
-	// Open database with WAL mode and foreign keys. Transactions take the
+	// Open database with WAL mode and foreign keys
-	// write lock when they begin and wait up to 5s for another writer,
+	dsn := dbPath + "?_journal_mode=WAL&_foreign_keys=on"
-	// instead of failing with "database is locked" when both write.
-	dsn := dbPath + "?_journal_mode=WAL&_foreign_keys=on" +
-		"&_txlock=immediate&_busy_timeout=5000"
 
 	database, err := sql.Open("sqlite3", dsn)
 	if err != nil {

internal/docker/client.go

@@ -3,14 +3,12 @@ package docker
 
 import (
 	"bufio"
-	"bytes"
 	"context"
 	"encoding/json"
 	"errors"
 	"fmt"
 	"io"
 	"log/slog"
-	"net"
 	"os"
 	"path/filepath"
 	"regexp"
@@ -23,15 +21,12 @@ import (
 	"github.com/docker/docker/api/types/image"
 	"github.com/docker/docker/api/types/mount"
 	"github.com/docker/docker/api/types/network"
-	"github.com/docker/docker/api/types/versions"
 	"github.com/docker/docker/client"
 	"github.com/docker/docker/pkg/archive"
 	"github.com/docker/docker/pkg/jsonmessage"
-	"github.com/docker/docker/pkg/stdcopy"
 	"github.com/docker/go-connections/nat"
 	controlapi "github.com/moby/buildkit/api/services/control"
 	buildkitclient "github.com/moby/buildkit/client"
-	"github.com/moby/buildkit/session"
 	"github.com/moby/buildkit/util/progress/progressui"
 	"go.uber.org/fx"
 
@@ -66,15 +61,6 @@ var ErrInvalidBranch = errors.New("invalid branch name")
 // ErrInvalidCommitSHA is returned when a commit SHA is not a valid hex string.
 var ErrInvalidCommitSHA = errors.New("invalid commit SHA")
 
-// ErrBuildKitUnavailable is returned when the Docker daemon is too old to
-// build with BuildKit.
-var ErrBuildKitUnavailable = errors.New("BuildKit is unavailable on the Docker daemon")
-
-// minBuildKitAPIVersion is the API version of Docker Engine 18.09, the first
-// that builds with BuildKit when asked to without experimental mode. Older
-// daemons refuse the request or silently use the legacy builder.
-const minBuildKitAPIVersion = "1.39"
-
 // validBranchRe matches safe git branch names.
 var validBranchRe = regexp.MustCompile(`^[a-zA-Z0-9._/\-]+$`)
 
@@ -226,9 +212,7 @@ func buildEnvSlice(env map[string]string) []string {
 	return envSlice
 }
 
-// buildMounts converts volume mounts to Docker mount configuration. Docker,
+// buildMounts converts volume mounts to Docker mount configuration.
-// not upaas, creates a missing host path, because upaas runs in a container
-// and cannot see the host's filesystem. An existing path is left alone.
 func buildMounts(volumes []VolumeMount) []mount.Mount {
 	mounts := make([]mount.Mount, 0, len(volumes))
 
@@ -238,9 +222,6 @@ func buildMounts(volumes []VolumeMount) []mount.Mount {
 			Source:   vol.HostPath,
 			Target:   vol.ContainerPath,
 			ReadOnly: vol.ReadOnly,
-			BindOptions: &mount.BindOptions{
-				CreateMountpoint: true,
-			},
 		})
 	}
 
@@ -392,17 +373,12 @@ func (c *Client) ContainerLogs(
 		}
 	}()
 
-	// A container without a terminal, as all of upaas's are, sends its
+	logs, err := io.ReadAll(reader)
-	// output in frames, each with a header naming stdout or stderr. Both
-	// go to one buffer, in the order they were written.
-	var logs bytes.Buffer
-
-	_, err = stdcopy.StdCopy(&logs, &logs, reader)
 	if err != nil {
 		return "", fmt.Errorf("failed to read container logs: %w", err)
 	}
 
-	return logs.String(), nil
+	return string(logs), nil
 }
 
 // IsContainerRunning checks if a container is running.
@@ -619,20 +595,6 @@ func (c *Client) performBuild(
 	ctx context.Context,
 	opts BuildImageOptions,
 ) (ImageID, error) {
-	server, err := c.docker.ServerVersion(ctx)
-	if err != nil {
-		return "", fmt.Errorf("failed to get Docker version: %w", err)
-	}
-
-	if versions.LessThan(server.APIVersion, minBuildKitAPIVersion) {
-		return "", fmt.Errorf(
-			"%w: Docker Engine %s (API %s) is older than 18.09 (API %s); "+
-				"upgrade Docker Engine",
-			ErrBuildKitUnavailable, server.Version, server.APIVersion,
-			minBuildKitAPIVersion,
-		)
-	}
-
 	// Create tar archive of build context
 	tarArchive, err := archive.TarWithOptions(opts.ContextDir, &archive.TarOptions{})
 	if err != nil {
@@ -646,24 +608,11 @@ func (c *Client) performBuild(
 		}
 	}()
 
-	buildSession, err := c.startBuildSession(ctx)
-	if err != nil {
-		return "", err
-	}
-
-	defer func() {
-		closeErr := buildSession.Close()
-		if closeErr != nil {
-			c.log.Error("failed to close build session", "error", closeErr)
-		}
-	}()
-
 	// Build with BuildKit: the stages of a multi-stage build are kept in
 	// its build cache, which Docker limits on its own, instead of being
 	// left behind as untagged images.
 	resp, err := c.docker.ImageBuild(ctx, tarArchive, dockertypes.ImageBuildOptions{
 		Version:    dockertypes.BuilderBuildKit,
-		SessionID:  buildSession.ID(),
 		Dockerfile: opts.DockerfilePath,
 		Tags:       opts.Tags,
 		Remove:     true,
@@ -699,34 +648,6 @@ func (c *Client) performBuild(
 	return "", nil
 }
 
-// startBuildSession attaches a BuildKit session to the daemon, as the docker
-// command line does for a build. BuildKit asks the client, over the session,
-// for registry access to fetch a base image that is not on the host; without
-// a session, Docker Engine 27 fails the build with "no active sessions". The
-// shared key is only used for a build context sent over the session; upaas
-// sends the context with the build request. The caller closes the session.
-func (c *Client) startBuildSession(ctx context.Context) (*session.Session, error) {
-	buildSession, err := session.NewSession(ctx, "")
-	if err != nil {
-		return nil, fmt.Errorf("failed to create build session: %w", err)
-	}
-
-	go func() {
-		runErr := buildSession.Run(ctx, func(
-			ctx context.Context,
-			proto string,
-			meta map[string][]string,
-		) (net.Conn, error) {
-			return c.docker.DialHijack(ctx, "/session", proto, meta)
-		})
-		if runErr != nil {
-			c.log.Error("build session failed", "error", runErr)
-		}
-	}()
-
-	return buildSession, nil
-}
-
 // scannerInitialBufferSize is the initial buffer size for the build log scanner.
 const scannerInitialBufferSize = 64 * 1024 // 64KB
 
@@ -739,8 +660,7 @@ const scannerMaxBufferSize = 1024 * 1024 // 1MB
 // newline-delimited JSON. BuildKit's progress arrives encoded in
 // "moby.buildkit.trace" messages; these are decoded and written as plain
 // text, as "docker build --progress=plain" shows it. Other lines, such as
-// build errors, are written unchanged. Docker ends a failed build with a line
+// build errors, are written unchanged.
-// carrying the error; it is returned once the output is written.
 func (c *Client) streamBuildOutput(
 	ctx context.Context,
 	body io.Reader,
@@ -770,8 +690,6 @@ func (c *Client) streamBuildOutput(
 	buf := make([]byte, 0, scannerInitialBufferSize)
 	scanner.Buffer(buf, scannerMaxBufferSize)
 
-	var buildErr error
-
 	for scanner.Scan() {
 		line := scanner.Bytes()
 
@@ -790,10 +708,6 @@ func (c *Client) streamBuildOutput(
 			continue
 		}
 
-		if err == nil && msg.Error != nil {
-			buildErr = msg.Error
-		}
-
 		// One write per line, so it is not split by the display's output.
 		_, _ = fmt.Fprintf(out, "%s\n", line)
 	}
@@ -806,7 +720,7 @@ func (c *Client) streamBuildOutput(
 		return fmt.Errorf("failed to read build output: %w", scanErr)
 	}
 
-	return buildErr
+	return nil
 }
 
 func (c *Client) performClone(

internal/docker/mounts_test.go

@@ -1,39 +0,0 @@
-package docker //nolint:testpackage // tests unexported buildMounts
-
-import (
-	"testing"
-
-	"github.com/docker/docker/api/types/mount"
-	"github.com/stretchr/testify/assert"
-)
-
-// TestBuildMountsCreatesMissingHostPath checks that every mount asks Docker
-// to create its host path if it is missing, and keeps the rest of the volume
-// as configured.
-func TestBuildMountsCreatesMissingHostPath(t *testing.T) {
-	t.Parallel()
-
-	volumes := []VolumeMount{
-		{HostPath: "/srv/app/data", ContainerPath: "/data", ReadOnly: false},
-		{HostPath: "/srv/app/config", ContainerPath: "/etc/app", ReadOnly: true},
-	}
-
-	want := []mount.Mount{
-		{
-			Type:        mount.TypeBind,
-			Source:      "/srv/app/data",
-			Target:      "/data",
-			ReadOnly:    false,
-			BindOptions: &mount.BindOptions{CreateMountpoint: true},
-		},
-		{
-			Type:        mount.TypeBind,
-			Source:      "/srv/app/config",
-			Target:      "/etc/app",
-			ReadOnly:    true,
-			BindOptions: &mount.BindOptions{CreateMountpoint: true},
-		},
-	}
-
-	assert.Equal(t, want, buildMounts(volumes))
-}

internal/docker/validation_test.go

@@ -6,7 +6,6 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
-	"io"
 	"log/slog"
 	"net/http"
 	"net/http/httptest"
@@ -17,7 +16,6 @@ import (
 	"time"
 
 	"github.com/docker/docker/client"
-	"github.com/docker/docker/pkg/stdcopy"
 	controlapi "github.com/moby/buildkit/api/services/control"
 )
 
@@ -273,10 +271,6 @@ func TestPerformBuildUsesBuildKit(t *testing.T) {
 	srv := httptest.NewServer(http.HandlerFunc(
 		func(w http.ResponseWriter, r *http.Request) {
 			switch {
-			case strings.HasSuffix(r.URL.Path, "/version"):
-				_, _ = w.Write([]byte(`{"Version":"27.3.1","ApiVersion":"1.47"}`))
-			case strings.HasSuffix(r.URL.Path, "/session"):
-				serveSession(t, w, r, make(chan string, 1))
 			case strings.HasSuffix(r.URL.Path, "/build"):
 				if r.URL.Query().Get("version") != "2" {
 					http.Error(w, "not a BuildKit build", http.StatusBadRequest)
@@ -320,245 +314,3 @@ func TestPerformBuildUsesBuildKit(t *testing.T) {
 		t.Errorf("build log is missing the build step:\n%s", buildLog.String())
 	}
 }
-
-// TestPerformBuildFails runs builds that fail against a fake Docker API and
-// checks that each returns its own error and that no image is inspected
-// afterwards.
-func TestPerformBuildFails(t *testing.T) {
-	t.Parallel()
-
-	tests := []struct {
-		name        string
-		engine      string // Docker Engine version the fake daemon reports
-		apiVersion  string // API version the fake daemon reports
-		buildOutput string
-		wantErr     string
-	}{
-		{
-			name:       "build step fails",
-			engine:     "27.3.1",
-			apiVersion: "1.47",
-			buildOutput: `{"stream":"Step 1/1 : RUN false\n"}` + "\n" +
-				`{"errorDetail":{"message":"exit code: 1"},"error":"exit code: 1"}`,
-			wantErr: "exit code: 1",
-		},
-		{
-			name:       "daemon too old for BuildKit",
-			engine:     "18.06.3-ce",
-			apiVersion: "1.38",
-			wantErr: "BuildKit is unavailable on the Docker daemon: " +
-				"Docker Engine 18.06.3-ce (API 1.38) is older than 18.09 (API 1.39); " +
-				"upgrade Docker Engine",
-		},
-		{
-			// The build step's own error shows the build went ahead.
-			name:       "daemon at API 1.39 builds",
-			engine:     "18.09.9",
-			apiVersion: "1.39",
-			buildOutput: `{"stream":"Step 1/1 : RUN false\n"}` + "\n" +
-				`{"errorDetail":{"message":"exit code: 1"},"error":"exit code: 1"}`,
-			wantErr: "exit code: 1",
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			t.Parallel()
-
-			srv := httptest.NewServer(http.HandlerFunc(
-				func(w http.ResponseWriter, r *http.Request) {
-					switch {
-					case strings.HasSuffix(r.URL.Path, "/version"):
-						_, _ = fmt.Fprintf(w, `{"Version":%q,"ApiVersion":%q}`,
-							tt.engine, tt.apiVersion)
-					case strings.HasSuffix(r.URL.Path, "/session"):
-						serveSession(t, w, r, make(chan string, 1))
-					case strings.HasSuffix(r.URL.Path, "/build"):
-						_, _ = w.Write([]byte(tt.buildOutput))
-					default:
-						t.Errorf("unexpected request to %s", r.URL.Path)
-					}
-				},
-			))
-			t.Cleanup(srv.Close)
-
-			dockerAPI, err := client.NewClientWithOpts(
-				client.WithHost("tcp://" + srv.Listener.Addr().String()),
-			)
-			if err != nil {
-				t.Fatal(err)
-			}
-
-			c := &Client{docker: dockerAPI, log: slog.Default()}
-
-			_, err = c.performBuild(t.Context(), BuildImageOptions{
-				ContextDir: t.TempDir(),
-				Tags:       []string{"upaas-test:1"},
-			})
-			if err == nil || err.Error() != tt.wantErr {
-				t.Errorf("got error %v, want %q", err, tt.wantErr)
-			}
-		})
-	}
-}
-
-// TestPerformBuildAttachesSession runs a build against a fake Docker API
-// that, like the real daemon, fails the build with "no active sessions"
-// unless the build names a session the client attached over the session
-// endpoint. It also checks that the session is closed when the build ends.
-func TestPerformBuildAttachesSession(t *testing.T) {
-	t.Parallel()
-
-	attached := make(chan string, 1)
-	sessionClosed := make(chan struct{})
-
-	srv := httptest.NewServer(http.HandlerFunc(
-		func(w http.ResponseWriter, r *http.Request) {
-			switch {
-			case strings.HasSuffix(r.URL.Path, "/version"):
-				_, _ = w.Write([]byte(`{"Version":"27.3.1","ApiVersion":"1.47"}`))
-			case strings.HasSuffix(r.URL.Path, "/session"):
-				serveSession(t, w, r, attached)
-				close(sessionClosed)
-			case strings.HasSuffix(r.URL.Path, "/build"):
-				id := r.URL.Query().Get("session")
-				attachedID := ""
-
-				// The daemon waits a few seconds for the build's session
-				// to attach.
-				if id != "" {
-					select {
-					case attachedID = <-attached:
-					case <-time.After(5 * time.Second):
-					}
-				}
-
-				if id == "" || attachedID != id {
-					_, _ = w.Write([]byte(`{"errorDetail":{"message":"no active sessions"},` +
-						`"error":"no active sessions"}`))
-				}
-			default:
-				t.Errorf("unexpected request to %s", r.URL.Path)
-			}
-		},
-	))
-	t.Cleanup(srv.Close)
-
-	dockerAPI, err := client.NewClientWithOpts(
-		client.WithHost("tcp://" + srv.Listener.Addr().String()),
-	)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	c := &Client{docker: dockerAPI, log: slog.Default()}
-
-	_, err = c.performBuild(t.Context(), BuildImageOptions{ContextDir: t.TempDir()})
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	select {
-	case <-sessionClosed:
-	case <-time.After(5 * time.Second):
-		t.Error("the build's session was not closed when the build ended")
-	}
-}
-
-// serveSession answers a request to attach a session as the Docker daemon
-// does: it switches the connection over to the session, sends the session's
-// ID on attached, and holds the connection until the client closes it.
-func serveSession(
-	t *testing.T,
-	w http.ResponseWriter,
-	r *http.Request,
-	attached chan<- string,
-) {
-	t.Helper()
-
-	conn, _, err := http.NewResponseController(w).Hijack()
-	if err != nil {
-		t.Error(err)
-
-		return
-	}
-
-	defer func() { _ = conn.Close() }()
-
-	_, err = io.WriteString(conn, "HTTP/1.1 101 Switching Protocols\r\n"+
-		"Connection: Upgrade\r\nUpgrade: h2c\r\n\r\n")
-	if err != nil {
-		t.Error(err)
-
-		return
-	}
-
-	attached <- r.Header.Get("X-Docker-Expose-Session-Uuid")
-
-	_, _ = io.Copy(io.Discard, conn)
-}
-
-// TestPerformCloneReadsFramedLogs runs a clone against a fake Docker API that
-// sends the clone container's output in frames, as Docker does for a
-// container without a terminal, and checks that the output comes back as
-// plain text and that the commit is read from it.
-func TestPerformCloneReadsFramedLogs(t *testing.T) {
-	t.Parallel()
-
-	const commit = "1647b43aa6b211686719313bc6372c3693c54ca9"
-
-	srv := httptest.NewServer(http.HandlerFunc(
-		func(w http.ResponseWriter, r *http.Request) {
-			w.Header().Set("Content-Type", "application/json")
-
-			switch {
-			case strings.HasSuffix(r.URL.Path, "/containers/create"):
-				_, _ = w.Write([]byte(`{"Id":"gitcontainer"}`))
-			case strings.HasSuffix(r.URL.Path, "/wait"):
-				_, _ = w.Write([]byte(`{"StatusCode":0}`))
-			case strings.HasSuffix(r.URL.Path, "/logs"):
-				_, _ = stdcopy.NewStdWriter(w, stdcopy.Stderr).
-					Write([]byte("Cloning into '/repo'...\n"))
-				_, _ = stdcopy.NewStdWriter(w, stdcopy.Stdout).
-					Write([]byte("COMMIT:" + commit + "\n"))
-			default:
-				_, _ = w.Write([]byte(`{}`))
-			}
-		},
-	))
-	t.Cleanup(srv.Close)
-
-	dockerAPI, err := client.NewClientWithOpts(
-		client.WithHost("tcp://" + srv.Listener.Addr().String()),
-	)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	c := &Client{docker: dockerAPI, log: slog.Default()}
-
-	dir := t.TempDir()
-	cfg := &cloneConfig{
-		repoURL:       "git@example.com:repo.git",
-		branch:        mainBranch,
-		sshPrivateKey: "fake-key",
-		containerDir:  filepath.Join(dir, "repo"),
-		hostDir:       filepath.Join(dir, "repo"),
-		keyFile:       filepath.Join(dir, "deploy_key"),
-		hostKeyFile:   filepath.Join(dir, "deploy_key"),
-	}
-
-	result, err := c.performClone(t.Context(), cfg)
-	if err != nil {
-		t.Fatal(err)
-	}
-
-	want := "Cloning into '/repo'...\nCOMMIT:" + commit + "\n"
-	if result.Output != want {
-		t.Errorf("got clone output %q, want %q", result.Output, want)
-	}
-
-	if result.CommitSHA != commit {
-		t.Errorf("got commit %q, want %q", result.CommitSHA, commit)
-	}
-}

internal/handlers/app.go

@@ -21,7 +21,6 @@ import (
 	"sneak.berlin/go/upaas/internal/database"
 	"sneak.berlin/go/upaas/internal/models"
 	"sneak.berlin/go/upaas/internal/service/app"
-	"sneak.berlin/go/upaas/internal/service/deploy"
 	"sneak.berlin/go/upaas/templates"
 )
 
@@ -29,7 +28,7 @@ const (
 	// recentDeploymentsLimit is the number of recent deployments to show.
 	recentDeploymentsLimit = 5
 	// deploymentsHistoryLimit is the number of deployments to show in history.
-	deploymentsHistoryLimit = 10
+	deploymentsHistoryLimit = 50
 )
 
 // redirectToApp issues a SeeOther redirect to the page for the given
@@ -195,7 +194,6 @@ func (h *Handlers) HandleAppDetail() http.HandlerFunc {
 			"EnvVars":          envVars,
 			"Labels":           labels,
 			"Volumes":          volumes,
-			"NoVolumesWarning": deploy.NoVolumesWarning,
 			"Ports":            ports,
 			"Deployments":      deployments,
 			"LatestDeployment": latestDeployment,

internal/handlers/app_branch_test.go

@@ -1,46 +0,0 @@
-package handlers_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-
-	"sneak.berlin/go/upaas/internal/service/app"
-)
-
-// TestAppPageTitleShowsBranch checks that an app's branch can be read from
-// the app page title, next to the status badge, without opening the edit page.
-func TestAppPageTitleShowsBranch(t *testing.T) {
-	t.Parallel()
-
-	testCtx := setupTestHandlers(t)
-
-	createdApp, err := testCtx.appSvc.CreateApp(t.Context(), app.CreateAppInput{
-		Name:    "branch-shown-app",
-		RepoURL: "git@example.com:user/branch-shown-app.git",
-		Branch:  "staging",
-	})
-	require.NoError(t, err)
-
-	request := httptest.NewRequestWithContext(
-		t.Context(), http.MethodGet, "/apps/"+createdApp.ID, nil,
-	)
-	request = addChiURLParams(request, map[string]string{"id": createdApp.ID})
-	recorder := httptest.NewRecorder()
-
-	testCtx.handlers.HandleAppDetail().ServeHTTP(recorder, request)
-
-	require.Equal(t, http.StatusOK, recorder.Code)
-
-	// The title row runs from the app name heading to the end of its div.
-	_, afterHeading, found := strings.Cut(recorder.Body.String(), "<h1")
-	require.True(t, found, "app page has no heading")
-
-	titleRow, _, _ := strings.Cut(afterHeading, "</div>")
-	assert.Contains(t, titleRow, `x-text="statusLabel"`)
-	assert.Contains(t, titleRow, ">staging</span>")
-}

internal/handlers/app_no_volumes_test.go

@@ -1,45 +0,0 @@
-package handlers_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-
-	"sneak.berlin/go/upaas/internal/models"
-	"sneak.berlin/go/upaas/internal/service/deploy"
-)
-
-// TestAppPageSaysFilesAreLostOnlyWhenAppHasNoVolumes checks that the app page
-// shows deploy.NoVolumesWarning until the app gets a volume mount.
-func TestAppPageSaysFilesAreLostOnlyWhenAppHasNoVolumes(t *testing.T) {
-	t.Parallel()
-
-	testCtx := setupTestHandlers(t)
-	createdApp := createTestApp(t, testCtx, "no-volumes-app")
-
-	renderAppPage := func() string {
-		request := httptest.NewRequestWithContext(
-			t.Context(), http.MethodGet, "/apps/"+createdApp.ID, nil,
-		)
-		request = addChiURLParams(request, map[string]string{"id": createdApp.ID})
-		recorder := httptest.NewRecorder()
-
-		testCtx.handlers.HandleAppDetail().ServeHTTP(recorder, request)
-		require.Equal(t, http.StatusOK, recorder.Code)
-
-		return recorder.Body.String()
-	}
-
-	assert.Contains(t, renderAppPage(), deploy.NoVolumesWarning)
-
-	volume := models.NewVolume(testCtx.database)
-	volume.AppID = createdApp.ID
-	volume.HostPath = "/srv/no-volumes-app"
-	volume.ContainerPath = "/data"
-	require.NoError(t, volume.Save(t.Context()))
-
-	assert.NotContains(t, renderAppPage(), deploy.NoVolumesWarning)
-}

internal/handlers/app_page_env_var_hint_test.go

@@ -1,39 +0,0 @@
-package handlers_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-
-	"sneak.berlin/go/upaas/internal/service/app"
-)
-
-// TestAppPageEnvVarHint checks that the environment variable editor says
-// changes take effect at the next deploy or rollback, in the warning style.
-func TestAppPageEnvVarHint(t *testing.T) {
-	t.Parallel()
-
-	testCtx := setupTestHandlers(t)
-
-	createdApp, err := testCtx.appSvc.CreateApp(t.Context(), app.CreateAppInput{
-		Name:    "env-hint-app",
-		RepoURL: "git@example.com:user/env-hint-app.git",
-	})
-	require.NoError(t, err)
-
-	request := httptest.NewRequestWithContext(
-		t.Context(), http.MethodGet, "/apps/"+createdApp.ID, nil,
-	)
-	request = addChiURLParams(request, map[string]string{"id": createdApp.ID})
-	recorder := httptest.NewRecorder()
-
-	testCtx.handlers.HandleAppDetail().ServeHTTP(recorder, request)
-
-	require.Equal(t, http.StatusOK, recorder.Code)
-	assert.Contains(t, recorder.Body.String(),
-		`<p class="alert-warning mt-1">`+
-			"Environment variable changes take effect at the next deploy or rollback.</p>")
-}

internal/handlers/app_page_layout_test.go

@@ -1,76 +0,0 @@
-package handlers_test
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-
-	"sneak.berlin/go/upaas/internal/service/app"
-)
-
-// TestAppPageLayout checks the app page's width, the order of its sections,
-// and the height of its two log boxes.
-func TestAppPageLayout(t *testing.T) {
-	t.Parallel()
-
-	testCtx := setupTestHandlers(t)
-
-	createdApp, err := testCtx.appSvc.CreateApp(t.Context(), app.CreateAppInput{
-		Name:    "layout-app",
-		RepoURL: "git@example.com:user/layout-app.git",
-	})
-	require.NoError(t, err)
-
-	request := httptest.NewRequestWithContext(
-		t.Context(), http.MethodGet, "/apps/"+createdApp.ID, nil,
-	)
-	request = addChiURLParams(request, map[string]string{"id": createdApp.ID})
-	recorder := httptest.NewRecorder()
-
-	testCtx.handlers.HandleAppDetail().ServeHTTP(recorder, request)
-
-	require.Equal(t, http.StatusOK, recorder.Code)
-
-	body := recorder.Body.String()
-
-	_, afterMain, found := strings.Cut(body, "<main")
-	require.True(t, found, "app page has no main element")
-
-	mainTag, _, _ := strings.Cut(afterMain, ">")
-	assert.Contains(t, mainTag, "max-width: 84rem;")
-
-	sectionTitles := []string{
-		"Container Logs",
-		"Deploy Key",
-		"Webhook URL",
-		"Last Deployment Build Logs",
-		"Environment Variables",
-		"Docker Labels",
-		"Volume Mounts",
-		"Port Mappings",
-		"Recent Deployments",
-		"Danger Zone",
-	}
-
-	previousIndex := -1
-
-	for _, title := range sectionTitles {
-		index := strings.Index(body, ">"+title+"</h2>")
-		require.NotEqual(t, -1, index, "app page has no %q section", title)
-		assert.Greater(t, index, previousIndex, "%q section is out of order", title)
-
-		previousIndex = index
-	}
-
-	for _, logBox := range []string{"containerLogsWrapper", "buildLogsWrapper"} {
-		_, afterRef, found := strings.Cut(body, `x-ref="`+logBox+`"`)
-		require.True(t, found, "app page has no %s", logBox)
-
-		logBoxTag, _, _ := strings.Cut(afterRef, ">")
-		assert.Contains(t, logBoxTag, "max-height: 800px;", logBox)
-	}
-}

internal/handlers/handlers_test.go

@@ -8,7 +8,6 @@ import (
 	"strconv"
 	"strings"
 	"testing"
-	"time"
 
 	"github.com/go-chi/chi/v5"
 	"github.com/stretchr/testify/assert"
@@ -1149,73 +1148,6 @@ func TestHandleCancelDeployReturns404ForUnknownApp(t *testing.T) {
 	assert.Equal(t, http.StatusNotFound, recorder.Code)
 }
 
-// TestHandleAppDeploymentsShowsTenNewest verifies the deployments page
-// lists only the 10 most recent deployments, newest first.
-func TestHandleAppDeploymentsShowsTenNewest(t *testing.T) {
-	t.Parallel()
-
-	testCtx := setupTestHandlers(t)
-	createdApp := createTestApp(t, testCtx, "deployments-page-app")
-
-	// Create 12 deployments, each started one minute after the one before.
-	firstStart := time.Date(2026, 1, 1, 0, 0, 0, 0, time.UTC)
-
-	ids := make([]int64, 0, 12)
-
-	for idx := range 12 {
-		deployment := models.NewDeployment(testCtx.database)
-		deployment.AppID = createdApp.ID
-		deployment.Status = models.DeploymentStatusSuccess
-		require.NoError(t, deployment.Save(context.Background()))
-
-		_, err := testCtx.database.Exec(
-			context.Background(),
-			"UPDATE deployments SET started_at = ? WHERE id = ?",
-			firstStart.Add(time.Duration(idx)*time.Minute),
-			deployment.ID,
-		)
-		require.NoError(t, err)
-
-		ids = append(ids, deployment.ID)
-	}
-
-	request := httptest.NewRequestWithContext(
-		t.Context(),
-		http.MethodGet,
-		"/apps/"+createdApp.ID+"/deployments",
-		nil,
-	)
-	request = addChiURLParams(request, map[string]string{"id": createdApp.ID})
-	recorder := httptest.NewRecorder()
-
-	handler := testCtx.handlers.HandleAppDeployments()
-	handler.ServeHTTP(recorder, request)
-
-	require.Equal(t, http.StatusOK, recorder.Code)
-
-	body := recorder.Body.String()
-	card := func(id int64) string {
-		return `data-deployment-id="` + strconv.FormatInt(id, 10) + `"`
-	}
-
-	assert.Equal(t, 10, strings.Count(body, `data-deployment-id="`))
-
-	// The two oldest are left out.
-	assert.NotContains(t, body, card(ids[0]))
-	assert.NotContains(t, body, card(ids[1]))
-
-	// The ten newest are shown, newest first.
-	previous := -1
-
-	for idx := len(ids) - 1; idx >= 2; idx-- {
-		position := strings.Index(body, card(ids[idx]))
-		require.Greater(t, position, previous,
-			"deployment %d missing or out of order", ids[idx])
-
-		previous = position
-	}
-}
-
 func TestHandleWebhookReturns404ForUnknownSecret(t *testing.T) {
 	t.Parallel()
 

internal/service/deploy/deploy.go

@@ -56,12 +56,6 @@ var (
 	ErrNoPreviousImage = errors.New("no previous image available for rollback")
 )
 
-// NoVolumesWarning is shown on the page of an app with no volume mounts and
-// written into each of its deploy logs.
-const NoVolumesWarning = "This app has no volume mounts, so the files it writes " +
-	"are lost whenever a deploy or rollback replaces its container; " +
-	"a restart of the container keeps them."
-
 // logFlushInterval is how often to flush buffered logs to the database.
 const logFlushInterval = time.Second
 
@@ -375,11 +369,6 @@ func (svc *Service) Deploy(
 
 	svc.logWebhookPayload(bgCtx, deployment, webhookEvent)
 
-	volumes, err := app.GetVolumes(bgCtx)
-	if err == nil && len(volumes) == 0 {
-		_ = deployment.AppendLog(bgCtx, NoVolumesWarning)
-	}
-
 	err = svc.updateAppStatusBuilding(bgCtx, app)
 	if err != nil {
 		return err
@@ -934,6 +923,7 @@ func (svc *Service) buildImage(
 
 	// Create log writer that flushes build output to deployment logs every second
 	logWriter := newDeploymentLogWriter(ctx, deployment)
+	defer logWriter.Close()
 
 	// BuildImage creates a tar archive from the local filesystem,
 	// so it needs the container path where files exist, not the host path.
@@ -943,10 +933,6 @@ func (svc *Service) buildImage(
 		Tags:           []string{imageTag},
 		LogWriter:      logWriter,
 	})
-
-	// Write the rest of the build output to the log before the result.
-	logWriter.Close()
-
 	if err != nil {
 		svc.notify.NotifyBuildFailed(ctx, app, deployment, err)
 		svc.failDeployment(

internal/service/deploy/deploy_build_test.go

@@ -1,91 +0,0 @@
-package deploy_test
-
-import (
-	"context"
-	"log/slog"
-	"net/http"
-	"net/http/httptest"
-	"os"
-	"strings"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"go.uber.org/fx/fxtest"
-
-	"sneak.berlin/go/upaas/internal/config"
-	"sneak.berlin/go/upaas/internal/database"
-	"sneak.berlin/go/upaas/internal/docker"
-	"sneak.berlin/go/upaas/internal/logger"
-	"sneak.berlin/go/upaas/internal/models"
-	"sneak.berlin/go/upaas/internal/service/deploy"
-)
-
-// TestBuildImageLogsBuildErrorBeforeDeployError runs a build that fails
-// against a fake Docker API and checks that the deploy fails with the
-// build's own error, which the deployment log shows before the deploy's.
-func TestBuildImageLogsBuildErrorBeforeDeployError(t *testing.T) {
-	t.Parallel()
-
-	srv := httptest.NewServer(http.HandlerFunc(
-		func(w http.ResponseWriter, r *http.Request) {
-			w.Header().Set("Content-Type", "application/json")
-
-			switch {
-			case strings.HasSuffix(r.URL.Path, "/containers/create"):
-				_, _ = w.Write([]byte(`{"Id":"gitcontainer"}`))
-			case strings.HasSuffix(r.URL.Path, "/version"):
-				_, _ = w.Write([]byte(`{"Version":"27.3.1","ApiVersion":"1.47"}`))
-			case strings.HasSuffix(r.URL.Path, "/build"):
-				_, _ = w.Write([]byte(`{"stream":"Step 1/1 : RUN false\n"}` + "\n" +
-					`{"errorDetail":{"message":"exit code: 1"},"error":"exit code: 1"}`))
-			default:
-				// The steps of the git clone, which succeeds.
-				_, _ = w.Write([]byte(`{}`))
-			}
-		},
-	))
-	t.Cleanup(srv.Close)
-
-	log := slog.New(slog.NewTextHandler(os.Stderr, nil))
-	lifecycle := fxtest.NewLifecycle(t)
-
-	dockerClient, err := docker.New(lifecycle, docker.Params{
-		Logger: logger.NewForTest(log),
-		Config: &config.Config{DockerHost: "tcp://" + srv.Listener.Addr().String()},
-	})
-	require.NoError(t, err)
-
-	lifecycle.RequireStart()
-	t.Cleanup(lifecycle.RequireStop)
-
-	db := database.NewTestDatabase(t)
-	ctx := context.Background()
-
-	app := models.NewApp(db)
-	app.ID = "buildapp-id"
-	app.Name = "buildapp"
-	app.Branch = "main"
-	require.NoError(t, app.Save(ctx))
-
-	deployment := models.NewDeployment(db)
-	deployment.AppID = app.ID
-	require.NoError(t, deployment.Save(ctx))
-
-	dataDir := t.TempDir()
-	cfg := &config.Config{DataDir: dataDir, HostDataDir: dataDir}
-
-	// The service has no notify service: the app has no ntfy topic and no
-	// Slack webhook, so the build failure notification sends nothing.
-	svc := deploy.NewTestServiceWithConfig(log, cfg, dockerClient)
-
-	_, err = svc.BuildImage(ctx, app, deployment)
-	require.EqualError(t, err, "failed to build image: exit code: 1")
-
-	logs := deployment.Logs.String
-	buildError := strings.Index(logs, "ERROR: exit code: 1")
-	deployError := strings.Index(logs, "ERROR: failed to build image: exit code: 1")
-
-	require.NotEqual(t, -1, buildError, logs)
-	assert.Less(t, buildError, deployError, logs)
-}

internal/service/deploy/deploy_volumes_test.go

@@ -1,79 +0,0 @@
-package deploy_test
-
-import (
-	"context"
-	"log/slog"
-	"os"
-	"strings"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-
-	"sneak.berlin/go/upaas/internal/config"
-	"sneak.berlin/go/upaas/internal/database"
-	"sneak.berlin/go/upaas/internal/docker"
-	"sneak.berlin/go/upaas/internal/logger"
-	"sneak.berlin/go/upaas/internal/models"
-	"sneak.berlin/go/upaas/internal/service/deploy"
-	"sneak.berlin/go/upaas/internal/service/notify"
-)
-
-// deployLog deploys a new app, with one volume mount when withVolume is set,
-// and returns the deploy's log. Docker is not connected, so the deploy fails
-// at the git clone, after the start of its log is written.
-func deployLog(t *testing.T, withVolume bool) string {
-	t.Helper()
-
-	log := logger.NewForTest(slog.New(slog.NewTextHandler(os.Stderr, nil)))
-	dataDir := t.TempDir()
-	cfg := &config.Config{DataDir: dataDir, HostDataDir: dataDir}
-	db := database.NewTestDatabase(t)
-
-	dockerClient, err := docker.New(nil, docker.Params{Logger: log, Config: cfg})
-	require.NoError(t, err)
-
-	notifySvc, err := notify.New(nil, notify.ServiceParams{Logger: log})
-	require.NoError(t, err)
-
-	svc, err := deploy.New(nil, deploy.ServiceParams{
-		Logger: log, Config: cfg, Database: db,
-		Docker: dockerClient, Notify: notifySvc,
-	})
-	require.NoError(t, err)
-
-	ctx := context.Background()
-
-	app := models.NewApp(db)
-	app.ID = "volumesapp-id"
-	app.Name = "volumesapp"
-	app.Branch = "main"
-	require.NoError(t, app.Save(ctx))
-
-	if withVolume {
-		volume := models.NewVolume(db)
-		volume.AppID = app.ID
-		volume.HostPath = "/srv/volumesapp"
-		volume.ContainerPath = "/data"
-		require.NoError(t, volume.Save(ctx))
-	}
-
-	err = svc.Deploy(ctx, app, nil, false)
-	require.ErrorIs(t, err, docker.ErrNotConnected)
-
-	deployments, err := app.GetDeployments(ctx, 1)
-	require.NoError(t, err)
-	require.Len(t, deployments, 1)
-
-	return deployments[0].Logs.String
-}
-
-func TestDeployLogSaysFilesAreLostOnlyWhenAppHasNoVolumes(t *testing.T) {
-	t.Parallel()
-
-	logWithoutVolumes := deployLog(t, false)
-	assert.Equal(t, 1, strings.Count(logWithoutVolumes, deploy.NoVolumesWarning),
-		logWithoutVolumes)
-
-	assert.NotContains(t, deployLog(t, true), deploy.NoVolumesWarning)
-}

internal/service/deploy/export_test.go

@@ -100,15 +100,6 @@ func (svc *Service) RecordDeployedImage(
 	return svc.recordDeployedImage(ctx, app, deployment, imageID)
 }
 
-// BuildImage exposes buildImage for testing.
-func (svc *Service) BuildImage(
-	ctx context.Context,
-	app *models.App,
-	deployment *models.Deployment,
-) (docker.ImageID, error) {
-	return svc.buildImage(ctx, app, deployment)
-}
-
 // BuildContainerOptionsExported exposes buildContainerOptions for testing.
 func (svc *Service) BuildContainerOptionsExported(
 	ctx context.Context,

templates/app_detail.html

@@ -5,7 +5,7 @@
 {{define "content"}}
 {{template "nav" .}}
 
-<main class="mx-auto px-4 py-8" style="max-width: 84rem;" x-data="appDetail({
+<main class="max-w-4xl mx-auto px-4 py-8" x-data="appDetail({
     appId: '{{.App.ID}}',
     initialDeploymentId: {{if .LatestDeployment}}{{.LatestDeployment.ID}}{{else}}null{{end}},
     initialStatus: '{{.App.Status}}',
@@ -26,12 +26,11 @@
     <!-- Header -->
     <div class="flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4 mb-8">
         <div>
-            <div class="flex flex-wrap items-center gap-3">
+            <div class="flex items-center gap-3">
                 <h1 class="text-2xl font-medium text-gray-900">{{.App.Name}}</h1>
                 <span x-bind:class="statusBadgeClass" x-text="statusLabel"></span>
-                <span class="badge-neutral font-mono break-all" title="Branch">{{.App.Branch}}</span>
             </div>
-            <p class="text-gray-500 font-mono text-sm mt-1">{{.App.RepoURL}}</p>
+            <p class="text-gray-500 font-mono text-sm mt-1">{{.App.RepoURL}}@{{.App.Branch}}</p>
         </div>
         <div class="flex gap-3">
             <a href="/apps/{{.App.ID}}/edit" class="btn-secondary">Edit</a>
@@ -54,26 +53,6 @@
         </div>
     </div>
 
-    <!-- Container Logs -->
-    <div class="card p-6 mb-6">
-        <div class="flex items-center justify-between mb-4">
-            <h2 class="section-title">Container Logs</h2>
-            <span x-bind:class="containerStatusBadgeClass" x-text="containerStatusLabel"></span>
-        </div>
-        <div class="relative">
-            <div x-ref="containerLogsWrapper" class="bg-gray-900 rounded-lg p-4 overflow-y-auto" style="max-height: 800px;">
-                <pre class="text-gray-100 text-xs font-mono whitespace-pre-wrap break-words m-0" x-text="containerLogs"></pre>
-            </div>
-            <button
-                x-show="!_containerAutoScroll"
-                x-transition
-                @click="_containerAutoScroll = true; Alpine.store('utils').scrollToBottom($refs.containerLogsWrapper)"
-                class="absolute bottom-2 right-4 bg-primary-600 hover:bg-primary-700 text-white text-xs px-3 py-1 rounded-full shadow-lg opacity-90 hover:opacity-100 transition"
-                title="Scroll to bottom"
-            >↓ Follow</button>
-        </div>
-    </div>
-
     <!-- Deploy Key -->
     <div class="card p-6 mb-6">
         <h2 class="section-title mb-4">Deploy Key</h2>
@@ -121,26 +100,6 @@
         </div>
     </div>
 
-    <!-- Last Deployment Build Logs -->
-    <div class="card p-6 mb-6" x-show="showBuildLogs" x-cloak>
-        <div class="flex items-center justify-between mb-4">
-            <h2 class="section-title">Last Deployment Build Logs</h2>
-            <span x-bind:class="buildStatusBadgeClass" x-text="buildStatusLabel"></span>
-        </div>
-        <div class="relative">
-            <div x-ref="buildLogsWrapper" class="bg-gray-900 rounded-lg p-4 overflow-y-auto" style="max-height: 800px;">
-                <pre class="text-gray-100 text-xs font-mono whitespace-pre-wrap break-words m-0" x-text="buildLogs"></pre>
-            </div>
-            <button
-                x-show="!_buildAutoScroll"
-                x-transition
-                @click="_buildAutoScroll = true; Alpine.store('utils').scrollToBottom($refs.buildLogsWrapper)"
-                class="absolute bottom-2 right-4 bg-primary-600 hover:bg-primary-700 text-white text-xs px-3 py-1 rounded-full shadow-lg opacity-90 hover:opacity-100 transition"
-                title="Scroll to bottom"
-            >↓ Follow</button>
-        </div>
-    </div>
-
     <!-- Environment Variables -->
     <div class="card p-6 mb-6" x-data="envVarEditor('{{.App.ID}}')">
         <h2 class="section-title mb-4">Environment Variables</h2>
@@ -178,7 +137,7 @@
                                     <button type="submit" class="btn-primary text-sm">Save</button>
                                     <button type="button" @click="editIdx = -1" class="text-gray-500 hover:text-gray-700 text-sm">Cancel</button>
                                 </form>
-                                <p class="alert-warning mt-1">Environment variable changes take effect at the next deploy or rollback.</p>
+                                <p class="text-xs text-amber-600 mt-1">⚠ Container restart needed after env var changes.</p>
                             </td>
                         </template>
                     </tr>
@@ -318,8 +277,6 @@
                 </tbody>
             </table>
         </div>
-        {{else}}
-        <p class="alert-warning">{{.NoVolumesWarning}}</p>
         {{end}}
         <form method="POST" action="/apps/{{.App.ID}}/volumes" class="flex flex-col sm:flex-row gap-2 items-end">
                 {{ .CSRFField }}
@@ -396,6 +353,26 @@
         </form>
     </div>
 
+    <!-- Container Logs -->
+    <div class="card p-6 mb-6">
+        <div class="flex items-center justify-between mb-4">
+            <h2 class="section-title">Container Logs</h2>
+            <span x-bind:class="containerStatusBadgeClass" x-text="containerStatusLabel"></span>
+        </div>
+        <div class="relative">
+            <div x-ref="containerLogsWrapper" class="bg-gray-900 rounded-lg p-4 overflow-y-auto" style="max-height: 400px;">
+                <pre class="text-gray-100 text-xs font-mono whitespace-pre-wrap break-words m-0" x-text="containerLogs"></pre>
+            </div>
+            <button
+                x-show="!_containerAutoScroll"
+                x-transition
+                @click="_containerAutoScroll = true; Alpine.store('utils').scrollToBottom($refs.containerLogsWrapper)"
+                class="absolute bottom-2 right-4 bg-primary-600 hover:bg-primary-700 text-white text-xs px-3 py-1 rounded-full shadow-lg opacity-90 hover:opacity-100 transition"
+                title="Scroll to bottom"
+            >↓ Follow</button>
+        </div>
+    </div>
+
     <!-- Recent Deployments -->
     <div class="card p-6 mb-6">
         <div class="flex items-center justify-between mb-4">
@@ -435,6 +412,26 @@
         </template>
     </div>
 
+    <!-- Last Deployment Build Logs -->
+    <div class="card p-6 mb-6" x-show="showBuildLogs" x-cloak>
+        <div class="flex items-center justify-between mb-4">
+            <h2 class="section-title">Last Deployment Build Logs</h2>
+            <span x-bind:class="buildStatusBadgeClass" x-text="buildStatusLabel"></span>
+        </div>
+        <div class="relative">
+            <div x-ref="buildLogsWrapper" class="bg-gray-900 rounded-lg p-4 overflow-y-auto" style="max-height: 400px;">
+                <pre class="text-gray-100 text-xs font-mono whitespace-pre-wrap break-words m-0" x-text="buildLogs"></pre>
+            </div>
+            <button
+                x-show="!_buildAutoScroll"
+                x-transition
+                @click="_buildAutoScroll = true; Alpine.store('utils').scrollToBottom($refs.buildLogsWrapper)"
+                class="absolute bottom-2 right-4 bg-primary-600 hover:bg-primary-700 text-white text-xs px-3 py-1 rounded-full shadow-lg opacity-90 hover:opacity-100 transition"
+                title="Scroll to bottom"
+            >↓ Follow</button>
+        </div>
+    </div>
+
     <!-- Danger Zone -->
     <div class="card border-2 border-error-500/20 bg-error-50/50 p-6">
         <h2 class="text-lg font-medium text-error-700 mb-4">Danger Zone</h2>