Staging deployment
Staging is a Mac Studio running the full stack behind a reverse proxy
(ADR-009,
ADR-016):
merged main deploys continuously via the runbook’s script — nobody deploys by hand.
- Runbook: STAGING_RUNBOOK
- Host setup: MAC_STUDIO_DEPLOYMENT
Secrets (database password, Resend key, auth secrets) exist only in the host’s environment files. The repo, CI, and this site never contain them.
Health: /healthz (liveness, dependency-free) and /readyz (Postgres + Redis
checks) back the deploy gate.
Where these docs are hosted
Section titled “Where these docs are hosted”This site itself deploys with the staging stack (PR-44): the app image builds the
static site and a docs compose service serves it, with public ingress through
Nginx Proxy Manager at https://docs.scopekite.code.lease. The container serves
prebuilt files only — no env, no secrets, no data access — and is access-controlled
at the proxy until the public-docs boundary is decided. Mapping steps live in the
staging runbook’s “Docs site proxy host” section.