fly.toml

# The dev.site control plane on Fly.
#
# One machine, one volume, SQLite on it. That is a deliberate ceiling, not an
# oversight: a Fly volume is attached to a single machine in a single region, and
# nothing here wants more than one writer. The data is tiny — a few hundred bytes
# per account — and since the heartbeat went away the write path is a handful of
# rows per user per lifetime, so the constraint that matters is reads, which a
# shared CPU serves comfortably.
#
# What is *not* here, and must not be: DEVSITE_SIGNING_KEY. It is a secret.

app = "devsite"
primary_region = "sjc"

[build]
  dockerfile = "Dockerfile"

[env]
  # This forms OAuth callbacks and the capability issuer. Shoo also derives its
  # default client id and pairwise subjects from it, so changing it after anyone
  # has signed in is disruptive. It must match the hostname browsers load.
  DEVSITE_PUBLIC_ORIGIN = "https://dev.site"
  # This deployment uses the relays from its Iroh Services project. A fork can
  # replace this list or remove it to use the n0 relay preset.
  DEVSITE_RELAY_URLS = "https://e67jyfby7vj7ak9h9.euc1.relay.iroh-svc.com/,https://e67jyfby7vj7ak9h9.use1.relay.iroh-svc.com/,https://e67jyfby7vj7ak9h9.usw1.relay.iroh-svc.com/,https://e67jyfby7vj7ak9h9.aps1.relay.iroh-svc.com/"
  RUST_LOG = "devsite_server=info,tower_http=warn,warn"

[[mounts]]
  source = "devsite_data"
  destination = "/data"
  initial_size = "1gb"

[http_service]
  internal_port = 8080
  force_https = true
  # Avoid a cold start on the capability-issuance path.
  auto_stop_machines = "off"
  auto_start_machines = true
  min_machines_running = 1

  [http_service.concurrency]
    type = "requests"
    hard_limit = 250
    soft_limit = 200

# Cheap, unauthenticated, and touches no state: it reports the origin the process
# actually booted with, which is the setting most worth noticing is wrong.
[[http_service.checks]]
  interval = "30s"
  timeout = "5s"
  grace_period = "10s"
  method = "GET"
  path = "/api/config"

[[vm]]
  size = "shared-cpu-1x"
  memory = "512mb"