grim7/13/2026, 11:32:45 PM

Three railway.json (api/worker/web): DOCKERFILE builder, per-service
dockerfilePath, healthcheck, and watch patterns that isolate rebuilds — a
web-only change rebuilds web alone; packages/** rebuilds all three.

DEPLOY.md documents the three services (Root Directory = repo root, or the
monorepo COPYs break; worker has no public domain), the full env matrix (every
var x service x secret, the VITE_SITE_URL build-time gotcha, APP_URL = the real
web URL fix), the two production posture checks to assert fire (no
BETTER_AUTH_SECRET refuses to boot; TRIPWIRE_DISABLE_EXEMPTION refused in prod),
the Northern-Virginia region pair, and rollback.

web healthcheck is /login (200); / is a 307 redirect.

Parentfb881bc