Deployment Guide#

# Build the project
npm run build

# Output goes to dist/
#   dist/index.mjs        (library entry)
#   dist/server.mjs       (standalone server entry)
#   dist/index.d.mts      (type declarations)
#   dist/server.d.mts     (type declarations)

import { defineConfig } from "tsup";

export default defineConfig({
  entry: {
    index: "src/index.ts",
    server: "src/server.ts",
  },
  format: ["esm"],
  dts: true,
  sourcemap: true,
  target: "node18",
  outDir: "dist",
  clean: true,
  splitting: false,
  external: ["express"],
});

# 1. Install dependencies
npm ci --production

# 2. Generate Prisma client
npx prisma generate

# 3. Run migrations
npx prisma migrate deploy

# 4. Build
npm run build

# 5. Start
node dist/server.mjs

# Install PM2 globally
npm install -g pm2

# Start with PM2
pm2 start dist/server.mjs --name authhero

# View logs
pm2 logs authhero

# Auto-restart on crash + startup on boot
pm2 startup
pm2 save

FROM node:22-alpine AS builder

WORKDIR /app

COPY package.json package-lock.json ./
RUN npm ci

COPY prisma ./prisma
COPY prisma.config.ts ./
RUN npx prisma generate

COPY tsconfig.json tsup.config.ts ./
COPY src ./src
RUN npm run build

# ---- Production ----
FROM node:22-alpine

WORKDIR /app

COPY --from=builder /app/dist ./dist
COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/package.json ./
COPY --from=builder /app/prisma ./prisma
COPY --from=builder /app/prisma.config.ts ./
COPY --from=builder /app/src/generated ./src/generated

EXPOSE 5000

CMD ["node", "dist/server.mjs"]

services:
  app:
    build: .
    ports:
      - "5000:5000"
    environment:
      - NODE_ENV=production
      - DATABASE_URL=postgresql://postgres:password@db:5432/authhero
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      # ... add all other env vars
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_started

  db:
    image: postgres:17-alpine
    volumes:
      - pgdata:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: password
      POSTGRES_DB: authhero
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 5s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    volumes:
      - redisdata:/data

volumes:
  pgdata:
  redisdata:

# Build and start all services
docker compose up -d --build

# Run migrations inside the app container
docker compose exec app npx prisma migrate deploy

# View logs
docker compose logs -f app

import express from "express";
import { createAuthHero } from "@nandalalshukla/auth-hero";

const app = express();

async function main() {
  // Create the auth-hero router (connects to DB, Redis, etc.)
  const authRouter = await createAuthHero({
    // All config comes from YOUR .env — auth-hero reads process.env
  });

  // Mount at /auth (or any path you want)
  app.use("/auth", authRouter);

  // Your other routes
  app.get("/api/hello", (req, res) => {
    res.json({ message: "Hello from your app!" });
  });

  app.listen(3000, () => console.log("Running on :3000"));
}

main();

server {
    listen 443 ssl http2;
    server_name api.yourdomain.com;

    ssl_certificate     /etc/letsencrypt/live/api.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/api.yourdomain.com/privkey.pem;

    location / {
        proxy_pass http://localhost:5000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}