feat(preview-deployments): variable templates and settings overhaul

[colocated]

What is this PR about?

Overhauls the Preview Deployment settings experience. Adds {variable} URL templates, support for four dynamic-DNS providers, and a redesigned settings modal. Preview domains and paths can now use {appname}, {branch}, {pr}, {hash} placeholders alongside the legacy *.domain.com wildcard — no more long hashed subdomains unless you want them.

Key features

• New variables supported in preview deployment URLs — {appname}, {branch}, {pr}, {hash} (case-insensitive) for both the Domain Template and Path fields. Example: pr-{pr}.preview.example.com with path /pr-{pr}/.
• New dynamic DNS providers supported — traefik.me, nip.io, sslip.io, backname.io are auto-detected and the server IP is injected in the format each service requires (position differs per service).
• Complete UI overhaul for easier use — Sectioned layout (Routing, HTTPS & Certificates, Triggers & Access), clickable variable chips that insert tokens at the cursor, live preview of the resolved URL, and a clear greyed-out state when the feature is off.
• Turning on preview deployments no longer closes the modal — The enable toggle lives at the top of the modal and no longer unmounts the settings on flip, preventing in-progress changes being lost across the resulting refetch.
• HTTPS gets disabled for dynamic DNS options that do not support HTTPS — Currently just traefik.me. When such a domain is entered the HTTPS switch is forced off and locked with an inline explanation.

Checklist

Before submitting this PR, please make sure that:

• You created a dedicated branch based on the canary branch.
• You have read the suggestions in the CONTRIBUTING.md file https://github.com/Dokploy/dokploy/blob/canary/CONTRIBUTING.md#pull-request
• You have tested this PR in your local instance.

Issues related (if applicable)

N/A

Screenshots (if applicable)

HTTPS is not force disabled when using other non-traefik.me providers, and the warning disappears.

Greptile Summary

This PR overhauls the Preview Deployment settings UI — adding {variable} URL templates, four dynamic-DNS provider integrations (traefik.me, nip.io, sslip.io, backname.io), variable-chip insertion, a live URL preview, and a sectioned modal layout. All three previously-flagged concerns are now resolved: unknown tokens are preserved by substitute and rejected by assertNoUnresolvedTokens, mixed */{…} templates are caught by both the zod superRefine and resolveWildcardDomain, and the wildcard path retains the original appName-slugIp single-label format so existing traefik.me URLs are not broken.

Confidence Score: 5/5

Safe to merge; all previously flagged P1s are addressed and only a cosmetic IP preview discrepancy remains.

All prior P1 issues (silent unknown-token substitution, mixed wildcard+template acceptance, unslugified appname, URL format change for existing traefik.me users) are definitively resolved in this revision. The one remaining finding is a P2 UI discrepancy in the example URL when server.ipAddress is unset, which does not affect actual deployment logic.

No files require special attention.

_{Reviews (4): Last reviewed commit: "fix: dont allow wildcard and variables i..." | Re-trigger Greptile}

[colocated]

All three inline comments addressed in 29fe9b7:

• Unknown {variable} tokens now throw with a clear error listing supported vars instead of silently producing a mangled domain.
• {appname} is pre-slugified consistently with {branch}, {pr}, {hash}.
• Added resolveWildcardDomain helper that preserves the legacy appname-ip.traefik.me single-label format for *. wildcard mode on any dynamic DNS provider — existing preview deployments keep their URL shape, and template-mode users opt into the new format.

@greptileai please re-review.

[colocated]

yes i got claude to autofix, i was feeling lazy after i'd redesigned the UI 🤣

[colocated]

not doing that again, claude broke the preview url box ffs

[colocated]

@greptileai run it back

[colocated]

@greptileai review