# WRNexus deployment operations

- Liveness: `GET /healthz`
- Readiness: `GET /readyz` (includes registered dependency checks)
- Migrations: run `bunx wrnexus db migrate --profile=production` once per release before scaling.
- Shutdown: the Bun production server drains on SIGTERM/SIGINT.
- Assets: `dist/public` files are content-addressed and may be cached immutably by a CDN.
- Secrets: provide `DATABASE_URL` and `SESSION_SECRET` through the platform secret store; never commit production env files.
- Logs: stdout/stderr are structured for platform collection. Configure OTLP for centralized telemetry.
- Scaling: start with 250m CPU/256Mi memory, use readiness probes, and scale horizontally from request latency and CPU.