Production Deployment

The full production guide is currently maintained in Chinese: 生产部署（中文） · source on GitHub.

The current release line is v0.2.0-rc.1. It is a 0.x release: APIs and database schemas may change. Complete backups, migration compatibility checks and a rollback rehearsal before production use.

Checklist summary:

1. Rotate secrets: JWT_SECRET, PostgreSQL/Redis/MinIO/Grafana credentials, default admin password, CORS_ALLOW_ORIGINS.
2. Single-server layout: Docker Compose behind the Traefik gateway; bind host ports to loopback and put TLS termination in front.
3. Migrations run automatically via the migrate container (goose, single source of truth under services/monitor/migrations/).
4. Backups & ops scripts ship under scripts/ops/ (backup, cleanup, rotation, rollback).
5. Observability: enable the Prometheus/Grafana compose profile; health endpoints for liveness probes.