Merge pull request 'ci: deploy dev infra [infra]' (#758) from codex/infra-only into main

Reviewed-on: #758 [infra]

ci/prod/compose/vault.yml

@@ -28,7 +28,7 @@ services:
     ports:
       - "0.0.0.0:${VAULT_HTTP_PORT}:8200"
     healthcheck:
-      test: ["CMD-SHELL","export VAULT_ADDR=http://127.0.0.1:8200; vault status >/dev/null 2>&1; rc=$?; [ \"$rc\" -eq 0 ] || [ \"$rc\" -eq 2 ]"]
+      test: ["CMD-SHELL","export VAULT_ADDR=http://127.0.0.1:8200; vault status >/dev/null 2>&1; rc=$$?; [ \"$$rc\" -eq 0 ] || [ \"$$rc\" -eq 2 ]"]
       interval: 10s
       timeout: 5s
       retries: 12

ci/prod/scripts/deploy/vault.sh

@@ -43,6 +43,7 @@ ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" \
   COMPOSE_PROJECT="$VAULT_COMPOSE_PROJECT" \
   bash -s <<'EOSSH'
 set -euo pipefail
+trap 'status=$?; echo "[deploy-vault:remote] error at line $LINENO" >&2; docker logs --tail 50 dev-vault >&2 || true; exit "$status"' ERR
 cd "${REMOTE_DIR}/compose"
 set -a
 . ../env/.env.runtime