Production hardening — SSR for OG tags, environment configs, Heroku/NFS hosting, CI/CD with GitHub Actions, security headers, rate limiting, PostHog analytics, and DNS setup.
.env.example up to date for all packagesSkip this section if user chose "Later" in step 00.
Heroku:
Procfileapp.json with env var descriptions, buildpacks, addonspackage.jsonNearlyFreeSpeech:
run.sh and deploy.sh scriptsexpress-rate-limit or similar)TURNSTILE_SECRET_KEY env var, middleware that extracts cf-turnstile-token header and verifies against Cloudflare's siteverify APIVITE_TURNSTILE_SITE_KEY env var, Turnstile widget on public forms (signup, contact, public shares)posthog-node (backend) and posthog-js (frontend)POSTHOG_API_KEY and POSTHOG_HOST env vars to backend and frontendlogger.ts with PostHog capture callslogger.ts with PostHog capture calls