CodeIssuesDiscussionsWikiPull RequestsProjectsCommitsActionsReleasesContributorsPulse● GatesSecuritySettingsDeploymentsPipelineInsightsAgents✨ Explain✨ Ask AI✨ Workspace✨ Spec✨ Tests▓ Debt Map✨ NL Search🏛 Archaeology
Blame · Line-by-line history
DEPLOY_CHECKLIST.md
Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.
| 04f6b7f | 1 | # Deploy checklist |
| 2 | ||
| 3 | Scannable go-live runbook. For detailed rationale + per-variable docs, see `DEPLOY.md`. | |
| 4 | ||
| 5 | ## Pre-deploy | |
| 6 | ||
| 7 | - [ ] `DATABASE_URL` set to a live Neon PostgreSQL connection string (hard-required) | |
| 8 | - [ ] `GIT_REPOS_PATH` points at a persistent volume (Fly: `/app/repos` via `gluecron_repos`) | |
| 9 | - [ ] Secrets reviewed in `.env.example`; optional keys (`ANTHROPIC_API_KEY`, `RESEND_API_KEY`, `GATETEST_API_KEY`, `VOYAGE_API_KEY`) set or consciously skipped | |
| 10 | - [ ] `ERROR_WEBHOOK_URL` **or** `SENTRY_DSN` set as a Fly secret (without this, errors log to stderr only) | |
| 11 | - [ ] `AUTOPILOT_DISABLED` decision made (default: enabled) | |
| 12 | - [ ] `DEMO_SEED_ON_BOOT` decision made (default: off) | |
| 13 | - [ ] Run `bun run preflight` locally — green before shipping | |
| 14 | - [ ] `bun test` clean on the deploy commit | |
| 15 | - [ ] `CHANGELOG.md` has an `[Unreleased]` entry for this deploy | |
| 16 | ||
| 17 | ## Deploy | |
| 18 | ||
| 19 | - [ ] `flyctl deploy` from the repo root | |
| 20 | - [ ] Release command runs `bun run db:migrate` automatically (configured in `fly.toml`); confirm it succeeded in the release logs | |
| 21 | - [ ] Fly machine reaches healthy state; no boot-loop | |
| 22 | - [ ] Persistent volume mounted and writable at the configured `GIT_REPOS_PATH` | |
| 23 | ||
| 24 | ## Post-deploy smoke | |
| 25 | ||
| 26 | - [ ] `GET /healthz` → 200 | |
| 27 | - [ ] `GET /readyz` → 200 (DB + git reachable) | |
| 28 | - [ ] `GET /status` renders; `GET /status.svg` returns a shields badge | |
| 29 | - [ ] Register a new user via `/register` | |
| 30 | - [ ] First user auto-promoted to site admin (check `/admin`) | |
| 31 | - [ ] Create a repo via `/new` | |
| 32 | - [ ] `git clone` over HTTPS succeeds | |
| 33 | - [ ] `git push` succeeds; post-receive pipeline runs (GateTest callback + webhooks) | |
| 34 | - [ ] AI review path exercised if `ANTHROPIC_API_KEY` is set | |
| 35 | - [ ] Sentry/webhook sink receives a forced test error | |
| 36 | ||
| 37 | ## First-day operations | |
| 38 | ||
| 39 | - [ ] Admin bootstrap: oldest row in `users` is the intended admin — register that account **first** (see `src/routes/admin.ts` bootstrap rule) | |
| 40 | - [ ] Site banner / motd configured in `/admin` if needed for launch | |
| 41 | - [ ] Billing plans seeded (free/pro/team/enterprise) — verify in `/admin` | |
| 42 | - [ ] Autopilot ticker heartbeat visible (unless `AUTOPILOT_DISABLED=1`) | |
| 43 | - [ ] `docs/LAUNCH_ANNOUNCEMENT.md` queued for Show HN / social | |
| 44 | - [ ] Add a dated entry to `CHANGELOG.md` and tag a release | |
| 45 | - [ ] Monitor `/metrics`, `/healthz`, and the error sink for the first hour |