CodeIssuesDiscussionsWikiPull RequestsProjectsCommitsActionsReleasesContributorsPulse● GatesSecuritySettingsDeploymentsPipelineInsightsAgents✨ Explain✨ Ask AI✨ Workspace✨ Spec✨ Tests▓ Debt Map✨ NL Search🏛 Archaeology
Blame · Line-by-line history
LAUNCH_TODAY.md
Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.
| a64e08d | 1 | # LAUNCH TODAY — exact steps to get GlueCron live |
| 2 | ||
| 3 | The app is deploy-ready. Tests pass (76/76). Boot verified. Migrations included. Dockerfile + Railway + Fly configs shipped. | |
| 4 | ||
| 5 | You need **two secrets** and **one deploy command**. That's it. | |
| 6 | ||
| 7 | --- | |
| 8 | ||
| 9 | ## A. What you need (3 minutes) | |
| 10 | ||
| 11 | 1. **Neon Postgres database** — free tier at https://neon.tech | |
| 12 | - Create a project → copy the "pooled" connection string. | |
| 13 | - This becomes `DATABASE_URL`. | |
| 14 | 2. **Anthropic API key** — https://console.anthropic.com | |
| 15 | - Create a key → `ANTHROPIC_API_KEY` (optional: all AI features gracefully degrade without it, but you'll want this for the differentiator features). | |
| 16 | 3. **A deploy target** — pick one: | |
| 17 | - Railway (easiest, `railway.toml` already configured) | |
| 18 | - Fly.io (has `fly.toml` with persistent volume for git repos) | |
| 19 | - Any Docker host (Render, Koyeb, DO App Platform, a VPS — `Dockerfile` works anywhere) | |
| 20 | ||
| 21 | --- | |
| 22 | ||
| 23 | ## B. Railway (fastest path — ~5 minutes) | |
| 24 | ||
| 25 | ```bash | |
| 26 | # 1. Install Railway CLI (one-time) | |
| 27 | npm i -g @railway/cli | |
| 28 | ||
| 29 | # 2. From the repo root | |
| 30 | railway login | |
| 31 | railway link # create or pick a project | |
| 32 | railway variables set DATABASE_URL="postgresql://..." | |
| 33 | railway variables set ANTHROPIC_API_KEY="sk-ant-..." | |
| 34 | railway up # builds Dockerfile, runs db:migrate via releaseCommand, starts server | |
| 35 | ``` | |
| 36 | ||
| 37 | Railway gives you a live URL like `https://gluecron-production.up.railway.app`. | |
| 38 | ||
| 39 | Add your custom domain (`gluecron.com`) in the Railway dashboard → Settings → Networking. | |
| 40 | ||
| 41 | --- | |
| 42 | ||
| 43 | ## C. Fly.io (persistent volume for git repos — ~8 minutes) | |
| 44 | ||
| 45 | ```bash | |
| 46 | # 1. Install flyctl (one-time) | |
| 47 | curl -L https://fly.io/install.sh | sh | |
| 48 | ||
| 49 | # 2. From the repo root | |
| 50 | fly auth login | |
| 51 | fly launch --no-deploy # accepts existing fly.toml | |
| 52 | fly volumes create gluecron_repos --size 10 --region lhr | |
| 53 | fly secrets set DATABASE_URL="postgresql://..." | |
| 54 | fly secrets set ANTHROPIC_API_KEY="sk-ant-..." | |
| 55 | fly deploy | |
| 56 | ``` | |
| 57 | ||
| 58 | Fly gives you `https://gluecron.fly.dev`. Point your domain with: | |
| 59 | ```bash | |
| 60 | fly certs add gluecron.com | |
| 61 | ``` | |
| 62 | ||
| 63 | --- | |
| 64 | ||
| 65 | ## D. Any Docker host | |
| 66 | ||
| 67 | ```bash | |
| 68 | docker build -t gluecron . | |
| 69 | docker run -d \ | |
| 70 | -p 3000:3000 \ | |
| 71 | -e DATABASE_URL="postgresql://..." \ | |
| 72 | -e ANTHROPIC_API_KEY="sk-ant-..." \ | |
| 73 | -v gluecron_repos:/app/repos \ | |
| 74 | gluecron | |
| 75 | ||
| 76 | # Run migrations once: | |
| 77 | docker run --rm \ | |
| 78 | -e DATABASE_URL="postgresql://..." \ | |
| 79 | gluecron bun run db:migrate | |
| 80 | ``` | |
| 81 | ||
| 82 | --- | |
| 83 | ||
| 84 | ## E. First-boot checklist (after deploy) | |
| 85 | ||
| 86 | 1. Visit `https://your-url/healthz` → `{"ok":true,...}` | |
| 87 | 2. Visit `https://your-url/readyz` → `{"ok":true}` (confirms DB connectivity) | |
| 88 | 3. Visit `https://your-url/register` → create the first admin account | |
| 89 | 4. Visit `https://your-url/new` → create a repo (auto-configures with green defaults) | |
| 90 | 5. Clone it: `git clone https://your-url/<owner>/<repo>.git` — confirms Smart HTTP works | |
| 91 | 6. Push a commit → post-receive hook fires GateTest + secret scan + webhook fan-out | |
| 92 | ||
| 93 | --- | |
| 94 | ||
| 95 | ## F. Custom domain (gluecron.com) | |
| 96 | ||
| 97 | DNS: | |
| 98 | - `A` or `CNAME` → your deploy host (Railway / Fly / Docker box) | |
| 99 | - If using Railway, they issue the cert automatically | |
| 100 | - If using Fly, run `fly certs add gluecron.com` after DNS is pointed | |
| 101 | - If using a VPS, terminate TLS with Caddy / nginx / Cloudflare in front | |
| 102 | ||
| 103 | --- | |
| 104 | ||
| 105 | ## G. Post-launch hardening (day 1–3) | |
| 106 | ||
| 107 | These are already shipped and will just start working: | |
| 108 | - ✅ Rate limiting (`/api/*` 120/min, `/login` 20/min, `/register` 10/min) | |
| 109 | - ✅ Health + readiness + metrics endpoints | |
| 110 | - ✅ Request-ID tracing on every response | |
| 111 | - ✅ Secret scanner on every push | |
| 112 | - ✅ AI security review on every push (if `ANTHROPIC_API_KEY` set) | |
| 113 | - ✅ Auto-repair engine (if `ANTHROPIC_API_KEY` set) | |
| 114 | - ✅ CODEOWNERS auto-sync | |
| 115 | - ✅ Notifications + dashboard + audit log | |
| 116 | ||
| 117 | Observability you might want to add later (Block F in BUILD_BIBLE.md): | |
| 118 | - Ship `/metrics` to Grafana / Datadog / Prometheus | |
| 119 | - Wire error tracking (Sentry) — one-file addition | |
| 120 | - Email digests (currently in-app only) | |
| 121 | ||
| 122 | --- | |
| 123 | ||
| 124 | ## H. What fails gracefully if you skip secrets | |
| 125 | ||
| 126 | | Missing | Effect | | |
| 127 | |---|---| | |
| 128 | | `DATABASE_URL` | App boots, `/healthz` returns 200, any DB route returns 500. Don't deploy without it. | | |
| 129 | | `ANTHROPIC_API_KEY` | All AI features return safe fallback strings. Site fully usable as a git host. | | |
| 130 | | `GATETEST_API_KEY` | GateTest integration silently skipped. Local gates still run. | | |
| 131 | ||
| 132 | --- | |
| 133 | ||
| 134 | ## I. If anything goes wrong | |
| 135 | ||
| 136 | - Check `/readyz` — tells you if DB is reachable. | |
| 137 | - Check `/metrics` — process health snapshot. | |
| 138 | - Container logs show every request with latency + status. | |
| 139 | - Every request has `X-Request-Id` header — grep logs by that ID. | |
| 140 | - `bun test` in the container proves the build is sound. |