Deployment

Docker Compose self-host (primary)

docker-compose.yml (≡ docker-compose-sample.yml except hardcoded demo secrets vs your_* placeholders). Three services on jet-network:

Service	Build	Ports	Depends	Healthcheck
frontend (jet-admin-frontend)	Dockerfile.frontend (Node 18 build → nginx:alpine, nginx.frontend.conf, SPA fallback)	80:80	backend healthy	wget --spider http://localhost/health 30 s
backend (jet-admin-backend)	Dockerfile.backend (Node 20-slim, prisma generate, ENTRYPOINT entrypoint.sh, CMD npm run pm2)	8090:3000	postgres healthy	wget --spider http://localhost:8090/health — wrong port (container listens on 3000 via PORT=3000; probe the container port)
postgres (jet-admin-postgres)	postgres:15-alpine	5432:5432	—	pg_isready -U postgres -d jet_admin_db 10 s

cp .env.docker .env
docker compose up -d --build
docker compose ps
docker compose logs -f backend

Volumes: jet-admin-postgres-data (/var/lib/postgresql/data), jet-admin-backend-logs (/app/apps/backend/logs). Networks: jet-admin-network (bridge).

warning

Compose args: pass VITE_FIREBASE_* + VITE_SUPABASE_URL/KEY as build args, but Dockerfile.frontend declares no ARG VITE_*, so they are ignored unless added. Bake frontend env via shell/apps/frontend/.env before vite build — all VITE_* values are statically replaced at build time, so changing them requires a rebuild. VITE_SUPABASE_KEY never reaches code (VITE_SUPABASE_ANON_KEY expected).

Rollback: docker compose down && docker compose up -d --build <previous-tag>; data persists in postgres_data unless -v is passed. postgres:5432 is exposed for debugging — close it in production.

Render (backend + MCP)

Both Dockerfiles bind $PORT (environment.js: PORT || 8090; HEALTHCHECK ${PORT:-8090|5001}), so Render's injected PORT (e.g. 10000) works unmodified. docker-entrypoint.backend.sh waits for Postgres and runs prisma migrate deploy + seed when SEED_DATABASE=true.

Set in the Render panel: DATABASE_URL, FIREBASE_CREDENTIALS, VAULT_ENCRYPTION_KEY, SUPABASE_*, OPENROUTER_API_KEY (or provider keys), BACKEND_URL (public URL), CORS_WHITELIST (frontend origin), WORKFLOW_ENGINE_DRIVER + TEMPORAL_* if using Temporal. Healthcheck path: /health.

Firebase Hosting (frontend)

apps/frontend/firebase.json: public: dist, SPA rewrite ** → /index.html, immutable cache for /assets/**, no-cache for index.html. Project: .firebaserc default: jet-labs-projects.

cd apps/frontend
npm run build
npm run deploy   # build + firebase deploy --only hosting

Docs (GitHub Pages, CI-only)

No app CI exists — both workflows deploy docs only:

Workflow	Trigger	Steps
.github/workflows/main.yml	push main	Node 18, npm ci in docs/, docusaurus build, upload-pages-artifact (docs/build) → deploy-pages
.github/workflows/deploy.yml	push dev	Node 20, npm install --legacy-peer-deps, same build/deploy

Docs alt (manual): cd docs && npm run build && npm run deploy (gh-pages -d build).

Temporal dev stack (optional workflow engine)

npm run temporal:up   # postgres :5433, server :7233, UI :8088, admin-tools

Set WORKFLOW_ENGINE_DRIVER=temporal + TEMPORAL_ADDRESS=localhost:7233, then cd apps/backend && npm run temporal:worker. temporal/dynamicconfig/development-sql.yaml disables client version check and enables update-workflow execution. Compose env: DB=postgres12, DBNAME=temporal, VISIBILITY_DBNAME=temporal_visibility, ENABLE_ES=false. Do not use :latest UI with server 1.23 (pinned ui:2.28.0).

Scaling knobs

• Backend: stateless except in-process fastq queues (workflow.tasks/results 10/10, listener.events 20) and audit buffer — run one writer or accept per-replica queues. pm2 single process in image; scale via replicas + sticky Socket.IO or external queue (RabbitMQ vars exist but no consumer — future work per README scaling strategy).
• Temporal: TEMPORAL_MAX_CONCURRENT_ACTIVITIES/WORKFLOWS (20/20), worker restart policy envs.
• Frontend: static nginx; cache-bust via hashed assets. client_max_body_size 50 M only in legacy nginx.conf; active nginx.frontend.conf inherits nginx default — large uploads should go direct to backend (10 MB multer cap) or Supabase.