replit-prod-checklist

# Replit Production Checklist ## Overview Complete checklist for deploying Replit apps to production using Autoscale or Reserved VM deployments. Covers configuration, secrets, health checks, custom domains, rollback procedures, and monitoring. ## Prerequisites - Replit Core, Pro, or Teams plan (deployment access) - App tested and working in Workspace - PostgreSQL database provisioned (if needed) - Custom domain (optional) with DNS access ## Production Deployment Checklist ### Phase 1: Configuration - [ ] `.replit` deployment section configured: ```toml [deployment] run = ["sh", "-c", "npm start"] build = ["sh", "-c", "npm ci --production && npm run build"] deploymentTarget = "autoscale" # or "cloudrun" for Reserved VM ``` - [ ] `replit.nix` includes only required system packages (trim dev-only deps) - [ ] `NODE_ENV` set to `"production"` in `.replit` env section - [ ] Port reads from `process.env.PORT` ### Phase 2: Secrets - [ ] All secrets configured in Replit Secrets tab - [ ] Secrets sync enabled (Workspace <-> Deployment) - [ ] No hardcoded credentials in source code - [ ] Startup validates all required secrets: ```typescript const REQUIRED = ['DATABASE_URL', 'JWT_SECRET']; const missing = REQUIRED.filter(k => !process.env[k]); if (missing.length) { console.error(`FATAL: Missing secrets: ${missing.join(', ')}`); process.exit(1); } ``` ### Phase 3: Health Check - [ ] `/health` endpoint exists and checks dependencies: ```typescript app.get('/health', async (req, ...