> ## Documentation Index
> Fetch the complete documentation index at: https://magenx404.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.
# Server Deployment
> Deploy the MagenX404 server to production
## Production Checklist
Before deploying to production:
Use a dedicated Solana RPC provider (Helius, QuickNode, etc.)
Set a secure JWT\_SECRET (generate with crypto.randomBytes)
Configure CORS to allow only your frontend domain
Set up rate limiting to prevent abuse
Add logging and error tracking (Sentry, LogRocket, etc.)
Set up monitoring and alerts
## Environment Variables
Set these environment variables in your production environment:
```env theme={null}
PORT=3000
JWT_SECRET=
JWT_EXPIRY=30d
SOLANA_RPC_URL=
NODE_ENV=production
```
## Generate Secure JWT Secret
```bash theme={null}
node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
```
## Deployment Options
### Render
1. Connect your repository to Render
2. Set environment variables
3. Deploy
The `render.yaml` file in the repository provides a configuration example.
### Railway
1. Create a new project on Railway
2. Connect your repository
3. Set environment variables
4. Deploy
### Heroku
```bash theme={null}
heroku create your-app-name
heroku config:set JWT_SECRET=$(node -e "console.log(require('crypto').randomBytes(32).toString('hex'))")
heroku config:set SOLANA_RPC_URL=your-rpc-url
git push heroku main
```
### Docker
Create a `Dockerfile`:
```dockerfile theme={null}
FROM node:18-alpine
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY . .
EXPOSE 3000
CMD ["npm", "start"]
```
Build and run:
```bash theme={null}
docker build -t magenx404-server .
docker run -p 3000:3000 \
-e JWT_SECRET=your-secret \
-e SOLANA_RPC_URL=your-rpc-url \
magenx404-server
```
## CORS Configuration
Update CORS settings in `server/index.ts`:
```typescript theme={null}
app.use(
cors({
origin: process.env.FRONTEND_URL || "https://yourdomain.com",
credentials: true,
exposedHeaders: ["X-404-Nonce", "X-404-Mechanism"],
})
);
```
## Rate Limiting
Add rate limiting middleware:
```bash theme={null}
npm install express-rate-limit
```
```typescript theme={null}
import rateLimit from "express-rate-limit";
const limiter = rateLimit({
windowMs: 15 * 60 * 1000, // 15 minutes
max: 100, // limit each IP to 100 requests per windowMs
});
app.use("/x404_auth", limiter);
```
## Monitoring
### Health Check Endpoint
The server includes a health check endpoint:
```bash theme={null}
curl https://your-server.com/health
```
### Logging
Add structured logging:
```bash theme={null}
npm install winston
```
```typescript theme={null}
import winston from "winston";
const logger = winston.createLogger({
level: "info",
format: winston.format.json(),
transports: [
new winston.transports.File({ filename: "error.log", level: "error" }),
new winston.transports.File({ filename: "combined.log" }),
],
});
// Use in routes
logger.info("Authentication successful", { publicKey, feature });
```
## Security Best Practices
1. **Use HTTPS**: Always use HTTPS in production
2. **Secure Headers**: Add security headers middleware
3. **Input Validation**: Validate all input parameters
4. **Error Handling**: Don't expose sensitive error details
5. **Regular Updates**: Keep dependencies updated
## Next Steps
Review server setup guide
View complete API documentation