CodeIssuesDiscussionsWikiPull RequestsProjectsCommitsActionsReleasesContributorsPulse● GatesSecuritySettingsDeploymentsPipelineInsightsAgents✨ Explain✨ Ask AI✨ Workspace✨ Spec✨ Tests▓ Debt Map✨ NL Search🏛 Archaeology
Blame · Line-by-line history
DEPLOY_CHECKLIST.md
Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.
| 04f6b7f | 1 | # Deploy checklist |
| 2 | ||
| fe8ae12 | 3 | Scannable go-live runbook for the metal-box deploy at **Hetzner |
| 4 | Gluecron-1, `178.104.208.252`**. For the bundled compose + Caddy setup, | |
| 5 | see `DEPLOY_METAL.md`. For the (deferred) Fly.io path, see `DEPLOY.md`. | |
| 04f6b7f | 6 | |
| 7 | ## Pre-deploy | |
| 8 | ||
| fe8ae12 | 9 | - [ ] DNS confirmed: `gluecron.com` + `www.gluecron.com` A-records point |
| 10 | at `178.104.208.252` (NOT the obsolete `45.76.171.37`), proxy | |
| 11 | status "DNS only" in Cloudflare | |
| 04f6b7f | 12 | - [ ] `DATABASE_URL` set to a live Neon PostgreSQL connection string (hard-required) |
| 6d2b36e | 13 | - [ ] `.env` populated on the box from `.env.example`; optional keys |
| 14 | (`ANTHROPIC_API_KEY`, `RESEND_API_KEY`, `GATETEST_API_KEY`, `VOYAGE_API_KEY`) | |
| 15 | set or consciously skipped | |
| 16 | - [ ] `ERROR_WEBHOOK_URL` **or** `SENTRY_DSN` set (without this, errors log to stderr only) | |
| 04f6b7f | 17 | - [ ] `AUTOPILOT_DISABLED` decision made (default: enabled) |
| 18 | - [ ] `DEMO_SEED_ON_BOOT` decision made (default: off) | |
| 6d2b36e | 19 | - [ ] `APP_BASE_URL=https://gluecron.com` |
| 20 | - [ ] Local: `bun run preflight` green | |
| 21 | - [ ] Local: `bun test` clean on the deploy commit | |
| 04f6b7f | 22 | - [ ] `CHANGELOG.md` has an `[Unreleased]` entry for this deploy |
| 23 | ||
| fe8ae12 | 24 | ## Deploy (Hetzner Gluecron-1, `178.104.208.252`) |
| 04f6b7f | 25 | |
| 6d2b36e | 26 | ```sh |
| fe8ae12 | 27 | ssh root@178.104.208.252 |
| 28 | command -v docker >/dev/null || curl -fsSL https://get.docker.com | sh | |
| 6d2b36e | 29 | git clone https://github.com/ccantynz-alt/Gluecron.com.git /opt/gluecron # first time |
| 30 | cd /opt/gluecron && git pull | |
| fe8ae12 | 31 | cp .env.example .env && nano .env # first time only |
| 6d2b36e | 32 | docker compose up -d --build |
| 33 | docker compose logs -f caddy # watch for cert issuance | |
| 34 | ``` | |
| 35 | ||
| 36 | - [ ] Repo cloned / updated at `/opt/gluecron` | |
| 37 | - [ ] `.env` present and populated | |
| 38 | - [ ] `docker compose up -d --build` exits clean | |
| 39 | - [ ] Caddy logs show `certificate obtained successfully` for | |
| 40 | `gluecron.com` AND `www.gluecron.com` | |
| 41 | - [ ] `docker compose ps` shows both services `Up (healthy)` | |
| 42 | ||
| 43 | ## First-run DB migration | |
| 44 | ||
| 45 | ```sh | |
| 46 | docker compose exec gluecron bun run db:migrate | |
| 47 | ``` | |
| 48 | ||
| 49 | - [ ] Exits with code 0 | |
| 50 | - [ ] No "column already exists" / "missing relation" warnings | |
| 04f6b7f | 51 | |
| 52 | ## Post-deploy smoke | |
| 53 | ||
| 6d2b36e | 54 | Run the one-command verifier: |
| 55 | ||
| 56 | ```sh | |
| 57 | bash scripts/verify-deploy.sh https://gluecron.com | |
| 58 | ``` | |
| 59 | ||
| 60 | Or tick manually: | |
| 61 | ||
| 62 | - [ ] `GET https://gluecron.com/healthz` → 200 `ok` | |
| 63 | - [ ] `GET https://gluecron.com/readyz` → 200 (DB + git reachable) | |
| 64 | - [ ] `GET https://gluecron.com/status` renders the HTML status page | |
| 65 | - [ ] `GET https://gluecron.com/status.svg` returns a shields-style badge | |
| 66 | - [ ] `GET https://gluecron.com/metrics` returns Prometheus-format metrics | |
| 67 | - [ ] `GET https://www.gluecron.com/healthz` → 200 (no cert error) | |
| 04f6b7f | 68 | - [ ] Register a new user via `/register` |
| 6d2b36e | 69 | - [ ] First user auto-promoted to site admin (`/admin` loads for that account) |
| 04f6b7f | 70 | - [ ] Create a repo via `/new` |
| 6d2b36e | 71 | - [ ] `git clone` over HTTPS succeeds against the new repo |
| 04f6b7f | 72 | - [ ] `git push` succeeds; post-receive pipeline runs (GateTest callback + webhooks) |
| 73 | - [ ] AI review path exercised if `ANTHROPIC_API_KEY` is set | |
| 6d2b36e | 74 | - [ ] Sentry / error-webhook sink receives a forced test error |
| 04f6b7f | 75 | |
| 76 | ## First-day operations | |
| 77 | ||
| 6d2b36e | 78 | - [ ] Admin bootstrap: oldest row in `users` is the intended admin — |
| 79 | register that account **first** (see `src/routes/admin.ts` bootstrap rule) | |
| 04f6b7f | 80 | - [ ] Site banner / motd configured in `/admin` if needed for launch |
| 81 | - [ ] Billing plans seeded (free/pro/team/enterprise) — verify in `/admin` | |
| 6d2b36e | 82 | - [ ] Autopilot ticker heartbeat visible in logs (unless `AUTOPILOT_DISABLED=1`) |
| 04f6b7f | 83 | - [ ] `docs/LAUNCH_ANNOUNCEMENT.md` queued for Show HN / social |
| 6d2b36e | 84 | - [ ] Point Alertmanager at `infra/alerts/gluecron.rules.yml` (see `infra/alerts/README.md`) |
| 85 | - [ ] Dated entry added to `CHANGELOG.md`; tag a release | |
| 04f6b7f | 86 | - [ ] Monitor `/metrics`, `/healthz`, and the error sink for the first hour |
| fe8ae12 | 87 | - [ ] Decommission the obsolete Vultr box at `45.76.171.37` via the Vultr dashboard (only after DNS has fully propagated) |
| 6d2b36e | 88 | |
| 89 | ## Redeploy | |
| 90 | ||
| 91 | ```sh | |
| fe8ae12 | 92 | ssh root@178.104.208.252 |
| 6d2b36e | 93 | cd /opt/gluecron && git pull && docker compose up -d --build |
| 94 | docker compose exec gluecron bun run db:migrate # if migrations changed | |
| 95 | bash scripts/verify-deploy.sh https://gluecron.com | |
| 96 | ``` | |
| 97 | ||
| 98 | ## Rollback | |
| 99 | ||
| 100 | ```sh | |
| fe8ae12 | 101 | ssh root@178.104.208.252 |
| 6d2b36e | 102 | cd /opt/gluecron |
| 103 | git log --oneline -10 # find last known-good sha | |
| 104 | git checkout <prev-sha> | |
| 105 | docker compose up -d --build | |
| 106 | ``` | |
| 107 | ||
| fe8ae12 | 108 | DNS is unchanged on rollback, so the failover is ~60s of rebuild time |
| 109 | with no Cloudflare/registrar changes required. |