Skip to main content

Deployment Guide

This guide walks you through deploying B4M on your own AWS account. Your deployment runs entirely in your AWS infrastructure - no traffic flows through Bike4Mind's systems.

Deployment Paths​

PathBest ForCI/CD
GitHub Actions (Recommended)Most customersGitHub Actions
SeedLegacy/existing Seed usersSeed CI/CD

Quick Start Checklist​

Architecture Overview​

Your fork deployment includes:

ComponentPurpose
CloudFrontCDN and routing (only public entry point)
LambdaServerless compute (~15 functions)
S3File storage (6 buckets)
SQSMessage queues (11 queues + DLQs)
VPCNetwork isolation
BedrockAI/ML models

See Architecture for complete AWS services inventory, security architecture, VPC configuration, cost estimates, and compliance information.

Key Concepts​

Environment-Driven Configuration​

All configuration is environment-variable driven through SST. No code changes required for domain migration or deployment.

Domain Pattern​

B4M uses the app.${SERVER_DOMAIN} pattern:

SERVER_DOMAINResulting URL
example.comhttps://app.example.com
staging.example.comhttps://app.staging.example.com

Security Model​

  • All Lambda functions run in private VPC subnets
  • Database has NO public internet access
  • S3 buckets blocked from direct access (CloudFront-only)
  • All secrets stored in AWS Secrets Manager

Documentation Map​

DocumentPurpose
PrerequisitesAWS account setup, VPC, Route53
Secrets ReferenceAll SST secrets with explanations
Domain MigrationCustom domain and OAuth setup
ArchitectureComplete infrastructure reference
CI/CD SetupGitHub Actions or Seed configuration
Email SetupSES configuration for platform email
TroubleshootingCommon issues and solutions

Support​

For deployment issues:

  1. Check Troubleshooting for common problems
  2. Review CloudWatch logs for detailed error messages
  3. Use the Admin > System Health panel to verify configuration
  4. Contact Bike4Mind support for complex issues