CodeIssuesDiscussionsWikiPull RequestsProjectsCommitsActionsReleasesContributorsPulse● GatesSecuritySettingsDeploymentsPipelineInsightsAgents✨ Explain✨ Ask AI✨ Workspace✨ Spec✨ Tests▓ Debt Map✨ NL Search🏛 Archaeology
Blame · Line-by-line history
DEPLOY_CHECKLIST.md
Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.
| 04f6b7f | 1 | # Deploy checklist |
| 2 | ||
| 6d2b36e | 3 | Scannable go-live runbook for the metal-box deploy at `45.76.171.37`. |
| 4 | For the compose + Caddy setup, see `DEPLOY_METAL.md`. For the (deferred) | |
| 5 | Fly.io path, see `DEPLOY.md`. | |
| 04f6b7f | 6 | |
| 7 | ## Pre-deploy | |
| 8 | ||
| 9 | - [ ] `DATABASE_URL` set to a live Neon PostgreSQL connection string (hard-required) | |
| 6d2b36e | 10 | - [ ] `.env` populated on the box from `.env.example`; optional keys |
| 11 | (`ANTHROPIC_API_KEY`, `RESEND_API_KEY`, `GATETEST_API_KEY`, `VOYAGE_API_KEY`) | |
| 12 | set or consciously skipped | |
| 13 | - [ ] `ERROR_WEBHOOK_URL` **or** `SENTRY_DSN` set (without this, errors log to stderr only) | |
| 04f6b7f | 14 | - [ ] `AUTOPILOT_DISABLED` decision made (default: enabled) |
| 15 | - [ ] `DEMO_SEED_ON_BOOT` decision made (default: off) | |
| 6d2b36e | 16 | - [ ] `APP_BASE_URL=https://gluecron.com` |
| 17 | - [ ] Local: `bun run preflight` green | |
| 18 | - [ ] Local: `bun test` clean on the deploy commit | |
| 04f6b7f | 19 | - [ ] `CHANGELOG.md` has an `[Unreleased]` entry for this deploy |
| 6d2b36e | 20 | - [ ] Cloudflare DNS confirmed: `gluecron.com` + `www.gluecron.com` |
| 21 | A-records point at `45.76.171.37`, proxy status "DNS only" | |
| 04f6b7f | 22 | |
| 6d2b36e | 23 | ## Deploy (metal box, `45.76.171.37`) |
| 04f6b7f | 24 | |
| 6d2b36e | 25 | ```sh |
| 26 | ssh root@45.76.171.37 | |
| 27 | git clone https://github.com/ccantynz-alt/Gluecron.com.git /opt/gluecron # first time | |
| 28 | cd /opt/gluecron && git pull | |
| 29 | cp .env.example .env && vim .env # first time only | |
| 30 | docker compose up -d --build | |
| 31 | docker compose logs -f caddy # watch for cert issuance | |
| 32 | ``` | |
| 33 | ||
| 34 | - [ ] Repo cloned / updated at `/opt/gluecron` | |
| 35 | - [ ] `.env` present and populated | |
| 36 | - [ ] `docker compose up -d --build` exits clean | |
| 37 | - [ ] Caddy logs show `certificate obtained successfully` for | |
| 38 | `gluecron.com` AND `www.gluecron.com` | |
| 39 | - [ ] `docker compose ps` shows both services `Up (healthy)` | |
| 40 | ||
| 41 | ## First-run DB migration | |
| 42 | ||
| 43 | ```sh | |
| 44 | docker compose exec gluecron bun run db:migrate | |
| 45 | ``` | |
| 46 | ||
| 47 | - [ ] Exits with code 0 | |
| 48 | - [ ] No "column already exists" / "missing relation" warnings | |
| 04f6b7f | 49 | |
| 50 | ## Post-deploy smoke | |
| 51 | ||
| 6d2b36e | 52 | Run the one-command verifier: |
| 53 | ||
| 54 | ```sh | |
| 55 | bash scripts/verify-deploy.sh https://gluecron.com | |
| 56 | ``` | |
| 57 | ||
| 58 | Or tick manually: | |
| 59 | ||
| 60 | - [ ] `GET https://gluecron.com/healthz` → 200 `ok` | |
| 61 | - [ ] `GET https://gluecron.com/readyz` → 200 (DB + git reachable) | |
| 62 | - [ ] `GET https://gluecron.com/status` renders the HTML status page | |
| 63 | - [ ] `GET https://gluecron.com/status.svg` returns a shields-style badge | |
| 64 | - [ ] `GET https://gluecron.com/metrics` returns Prometheus-format metrics | |
| 65 | - [ ] `GET https://www.gluecron.com/healthz` → 200 (no cert error) | |
| 04f6b7f | 66 | - [ ] Register a new user via `/register` |
| 6d2b36e | 67 | - [ ] First user auto-promoted to site admin (`/admin` loads for that account) |
| 04f6b7f | 68 | - [ ] Create a repo via `/new` |
| 6d2b36e | 69 | - [ ] `git clone` over HTTPS succeeds against the new repo |
| 04f6b7f | 70 | - [ ] `git push` succeeds; post-receive pipeline runs (GateTest callback + webhooks) |
| 71 | - [ ] AI review path exercised if `ANTHROPIC_API_KEY` is set | |
| 6d2b36e | 72 | - [ ] Sentry / error-webhook sink receives a forced test error |
| 04f6b7f | 73 | |
| 74 | ## First-day operations | |
| 75 | ||
| 6d2b36e | 76 | - [ ] Admin bootstrap: oldest row in `users` is the intended admin — |
| 77 | register that account **first** (see `src/routes/admin.ts` bootstrap rule) | |
| 04f6b7f | 78 | - [ ] Site banner / motd configured in `/admin` if needed for launch |
| 79 | - [ ] Billing plans seeded (free/pro/team/enterprise) — verify in `/admin` | |
| 6d2b36e | 80 | - [ ] Autopilot ticker heartbeat visible in logs (unless `AUTOPILOT_DISABLED=1`) |
| 04f6b7f | 81 | - [ ] `docs/LAUNCH_ANNOUNCEMENT.md` queued for Show HN / social |
| 6d2b36e | 82 | - [ ] Point Alertmanager at `infra/alerts/gluecron.rules.yml` (see `infra/alerts/README.md`) |
| 83 | - [ ] Dated entry added to `CHANGELOG.md`; tag a release | |
| 04f6b7f | 84 | - [ ] Monitor `/metrics`, `/healthz`, and the error sink for the first hour |
| 6d2b36e | 85 | |
| 86 | ## Redeploy | |
| 87 | ||
| 88 | ```sh | |
| 89 | ssh root@45.76.171.37 | |
| 90 | cd /opt/gluecron && git pull && docker compose up -d --build | |
| 91 | docker compose exec gluecron bun run db:migrate # if migrations changed | |
| 92 | bash scripts/verify-deploy.sh https://gluecron.com | |
| 93 | ``` | |
| 94 | ||
| 95 | ## Rollback | |
| 96 | ||
| 97 | ```sh | |
| 98 | ssh root@45.76.171.37 | |
| 99 | cd /opt/gluecron | |
| 100 | git log --oneline -10 # find last known-good sha | |
| 101 | git checkout <prev-sha> | |
| 102 | docker compose up -d --build | |
| 103 | ``` | |
| 104 | ||
| 105 | DNS is unchanged, so rollback = ~60s of rebuild time with no | |
| 106 | Cloudflare/registrar changes required. |