Deploy & Security

Environments

dev (local) · staging (dev.openaptitude.com) · prod (openaptitude.com) · prod admin (admin.openaptitude.com). Admin Docs (docs.admin.openaptitude.com) · User Docs (docs.openaptitude.com).

Deploy commands

npm run deploy            # build + deploy prod
npm run deploy:staging    # build + deploy staging
npm run db:migrate:remote # apply DB migrations (forward-only)

Docs sites: python -m mkdocs build -f docs/<site>/mkdocs.yml then wrangler pages deploy docs/<site>/site.

Docs Deploy

python -m mkdocs build -f docs/user/mkdocs.yml
npx wrangler pages deploy docs/user/site --project-name oa-docs-user
python -m mkdocs build -f docs/admin/mkdocs.yml
npx wrangler pages deploy docs/admin/site --project-name oa-docs-admin

Security

Admin behind Access + Argon2 + TOTP; secrets via wrangler secret put (never in the repo); structured logs with no PII; Turnstile + rate limits on public endpoints; dependency audits before release. Full checklist in docs/build/DEEP_SPEC_09.