Self-Hosting

Local

docker compose -f infra/docker-compose.yml up -d --build --wait

Production Notes

• terminate TLS at edge/proxy (nginx, caddy, cloud LB)
• route WebSocket upgrade traffic to data plane
• keep control API behind backend/admin paths
• store secrets in managed secret store (not plaintext env in CI)
• use rolling deployments with health checks

Recommended Split

• public internet: data plane WS endpoint
• private/internal: control API + Postgres

Typed Compose Service Map

const services: ComposeServices = {
  postgres: { port: 5432 },
  controlApi: { port: 3000 },
  rustServer: { port: 4000 },
};