Prepares httpSMS for production deployment to httpsms.voangory.com with proper infrastructure, security hardening, and removal of hardcoded domain references.

Infrastructure

• Nginx reverse proxy with SSL/TLS termination, rate limiting (10 req/s API, 30 req/s web), security headers (HSTS, CSP, X-Frame-Options)
• Production docker-compose with health checks for all services, resource limits, and proper networking
• Automated setup via setup.sh with password generation and SSL certificate guidance

Configuration

All hardcoded httpsms.com references replaced with APP_URL environment variable:

// Before
return message + " You need to grant the SMS permission to the httpSMS Android app https://httpsms.com/blog/..."

// After  
appURL := service.appURL
if appURL == "" {
    appURL = "https://httpsms.com"
}
return fmt.Sprintf("%s You need to grant the SMS permission to the httpSMS Android app %s/blog/...", message, appURL)

Affected services: message_service, webhook_service, discord_service, billing_service, swagger routes.

Bug Fixes

• PostgreSQL healthcheck: pg_isready, -U → pg_isready -U
• Added missing Redis healthcheck
• Fixed potential panic in URL domain extraction (empty split array)
• Dockerfile now includes ca-certificates for HTTPS

Security

• Removed default passwords from production config (now requires explicit POSTGRES_PASSWORD, REDIS_PASSWORD)
• Added /health endpoint for monitoring
• Restart policy: on-failure → unless-stopped

Documentation

• DEPLOYMENT.md - Complete deployment guide with Firebase/SMTP setup, SSL configuration, troubleshooting
• QUICKSTART.md - Command reference for docker-compose, database ops, SSL management
• Environment templates: api/.env.voangory, web/.env.voangory, .env.example

Deployment domains:

• Web: https://httpsms.voangory.com
• API: https://api.httpsms.voangory.com

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.