Deployment & HTTPS

A MasterController API is a plain Node process — deploy it anywhere Node runs. The recommended setup: HTTPS (direct or via proxy), a process manager, and NODE_ENV=production.

Production server#

import { readFileSync } from 'node:fs';

const server = master.setupServer('https', {
  key: readFileSync(process.env.TLS_KEY),
  cert: readFileSync(process.env.TLS_CERT),
});
master.enableHSTS({ maxAge: 31536000, includeSubDomains: true, preload: true });

Process manager (PM2)#

$ npm install -g pm2
$ NODE_ENV=production PORT=3001 pm2 start server.js --name my-app-api
$ pm2 save
$ pm2 startup

Behind a reverse proxy#

Terminate TLS at nginx/Caddy and forward to the app — a common split:

https://example.com/       -> Next.js   (:3000)
https://api.example.com/   -> MasterController (:3001)

Set FRONTEND_URL (for CORS) and trustedProxies so forwarded headers are honored only from your proxy.

With the Master CLI#

If you scaffolded with Master, one command runs both halves in production:

$ master build      # builds the Next.js frontend
$ NODE_ENV=production master start