feat: integrate invitation access, world NPCs, and deployment

deploy/zulip/compose.override.yaml

@@ -0,0 +1,80 @@
+secrets:
+  zulip__postgres_password:
+    environment: ZULIP__POSTGRES_PASSWORD
+  zulip__memcached_password:
+    environment: ZULIP__MEMCACHED_PASSWORD
+  zulip__rabbitmq_password:
+    environment: ZULIP__RABBITMQ_PASSWORD
+  zulip__redis_password:
+    environment: ZULIP__REDIS_PASSWORD
+  zulip__secret_key:
+    environment: ZULIP__SECRET_KEY
+  zulip__email_password:
+    environment: ZULIP__EMAIL_PASSWORD
+
+services:
+  proxy:
+    image: caddy:2.10.2-alpine
+    restart: unless-stopped
+    command: ["caddy", "run", "--config", "/etc/caddy/Caddyfile"]
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+    depends_on:
+      - zulip
+    mem_limit: 32m
+    cpus: 0.1
+    networks:
+      default:
+        ipv4_address: 172.30.50.10
+      whaletown:
+        aliases:
+          - zulip.novamailio.com
+
+  database:
+    mem_limit: 384m
+    cpus: 0.5
+
+  memcached:
+    command:
+      - sh
+      - -euc
+      - |
+        echo 'mech_list: plain' > "$$SASL_CONF_PATH"
+        echo "zulip@$$HOSTNAME:$$(cat $$MEMCACHED_PASSWORD_FILE)" > "$$MEMCACHED_SASL_PWDB"
+        echo "zulip@localhost:$$(cat $$MEMCACHED_PASSWORD_FILE)" >> "$$MEMCACHED_SASL_PWDB"
+        exec memcached -S -m 32
+    mem_limit: 64m
+    cpus: 0.2
+
+  rabbitmq:
+    mem_limit: 256m
+    cpus: 0.4
+
+  redis:
+    mem_limit: 96m
+    cpus: 0.2
+
+  zulip:
+    ports: !override []
+    environment:
+      SETTING_EXTERNAL_HOST: zulip.novamailio.com
+      SETTING_ZULIP_ADMINISTRATOR: admin@novamailio.com
+      SETTING_EMAIL_BACKEND: django.core.mail.backends.console.EmailBackend
+      SETTING_SEND_LOGIN_EMAILS: "False"
+      CONFIG_application_server__queue_workers_multiprocess: "false"
+      LOADBALANCER_IPS: 172.30.50.10
+      TRUST_GATEWAY_IP: "False"
+    mem_limit: 1400m
+    cpus: 1.5
+    networks:
+      default:
+      whaletown:
+
+networks:
+  default:
+    ipam:
+      config:
+        - subnet: 172.30.50.0/24
+  whaletown:
+    external: true
+    name: whaletown_whaletown