ADR 0004: Shared droplet, own Postgres each
- Status: Accepted
- Date: 2026-09-11
Context
Five demo shops with tiny load do not justify five hosts, but a shared database would make the shops lie about their independence and couple resets, backups and failures.
Decision
All shops deploy to the shared keferboeck-ltd droplet via Kamal, each with its own
Postgres accessory container, its own subdomain, and independent nightly backups.
Consequences
One machine to run, honest per-shop isolation, per-shop resets and restores. The droplet remains the single point of failure accepted in the platform-wide DR plan.