Skip to main content

Deployment Guide

This guide walks you through deploying B4M on your own AWS account. Your deployment runs entirely in your AWS infrastructure - no traffic flows through Bike4Mind's systems.

Deployment Paths

PathBest ForCI/CD
GitHub Actions (Recommended)Most customersGitHub Actions
SeedLegacy/existing Seed usersSeed CI/CD

Quick Start Checklist

Architecture Overview

Your fork deployment includes:

ComponentPurpose
CloudFrontCDN and routing (only public entry point)
LambdaServerless compute (~15 functions)
S3File storage (6 buckets)
SQSMessage queues (11 queues + DLQs)
VPCNetwork isolation
BedrockAI/ML models

See Architecture for complete AWS services inventory, security architecture, VPC configuration, cost estimates, and compliance information.

Key Concepts

Environment-Driven Configuration

All configuration is environment-variable driven through SST. No code changes required for domain migration or deployment.

Domain Pattern

B4M uses the app.${SERVER_DOMAIN} pattern:

SERVER_DOMAINResulting URL
example.comhttps://app.example.com
staging.example.comhttps://app.staging.example.com

Security Model

  • All Lambda functions run in private VPC subnets
  • Database has NO public internet access
  • S3 buckets blocked from direct access (CloudFront-only)
  • All secrets stored in AWS Secrets Manager

Documentation Map

DocumentPurpose
PrerequisitesAWS account setup, VPC, Route53
Secrets ReferenceAll SST secrets with explanations
Domain MigrationCustom domain and OAuth setup
ArchitectureComplete infrastructure reference
CI/CD SetupGitHub Actions or Seed configuration
Email SetupSES configuration for platform email
TroubleshootingCommon issues and solutions

Support

For deployment issues:

  1. Check Troubleshooting for common problems
  2. Review CloudWatch logs for detailed error messages
  3. Use the Admin > System Health panel to verify configuration
  4. Contact Bike4Mind support for complex issues