ollwrite — Launch Runbook

Pick the dedicated domain

Why: ollwrite launches on its own name, not a subdomain — it's the URL every later step (Coolify FQDN, Core CORS_ORIGINS, the Stripe success URL, the GTM posts) points at. Locking it now avoids re-pointing everything later.

Do: buy the domain, then point DNS at the VPS. Coolify + Traefik issue the Let's Encrypt TLS automatically once the record resolves.

# DNS (Hostinger) — both records → the Hetzner VPS
A   @   72.62.150.237
A   *   72.62.150.237
# then set this FQDN as the Coolify domain for the ollwrite app (Stage 2)

Set the price + the free / paid split

Why: the number and the free/paid boundary define the Stripe product (Stage 3) and what the app gates behind Pro. Feed the value to feed the corpus — meter generously; the free tier must be genuinely usable so people bring their library.

Do: decide the split, e.g. Free = Groq-8b generation + a capped corpus; Pro = the Claude / 70b dial + unlimited corpus. Then set PRICE in src/lib/pricing.ts so the paywall + upgrade copy read the single source.

// src/lib/pricing.ts
export const PRICE = {
  amount: 9_00,        // TBD — the chosen number, in minor units
  currency: 'chf',
  interval: 'once',    // pay-once, not subscription
  free:  { model: 'groq-8b', corpusDocs: 25 },   // TBD split
  pro:   { model: 'claude|70b-dial', corpusDocs: Infinity },
};

Create the oll-memory Coolify app

Why: one Coolify app per service (Base Directory + Watch Paths) so only oll-memory redeploys on its changes, reachable Core-side by its network alias.

Base Directory   /services/oll-memory
Watch Paths      services/oll-memory/**
Port             $PORT            # 12-factor, non-root
Network alias    oll-memory       # shared docker network `ollam`
Auto-deploy      OFF              # deploy is a deliberate tag/dispatch

Provision the private Neon oll_memory DB with pgvector

Why: database-per-service (ADR-008) — oll-memory owns its own store, no other service touches it. The vector extension is what makes similarity search possible.

-- once, on the fresh Neon oll_memory database
CREATE EXTENSION IF NOT EXISTS vector;

Stand up Ollama running nomic-embed-text, then set the env

Why: prod embeds with real nomic (768-dim) reachable from oll-memory; the keyless local-hash provider stays the CI / dev default so the pipeline needs no model download. /api/extract generation also needs an oll-model token.

EMBED_PROVIDER=ollama
EMBED_DIM=768
OLLAMA_EMBED_BASE_URL=http://ollama:11434
DATABASE_URL=postgresql://…@…/oll_memory   # the Neon oll_memory DB
OLL_MEMORY_SERVICE_TOKEN=<generate>          # the caller (BFF) presents this
OLL_MODEL_BASE_URL=https://model.oll.am
OLL_MODEL_SERVICE_TOKEN=<model token>         # for /api/extract generation

Deploy the feat/memory-sidecar branch to the dedicated domain

Why: this is the verified product front. Merge it to its main / point Coolify at it, set the Stage-0 domain as the app FQDN → Traefik issues TLS.

Set the ollwrite env — service tokens are server-only

Why: the service tokens must never be NEXT_PUBLIC_ — that would ship them to the browser. They live only in the BFF (server) layer. AUTH_ENABLED=true turns prod gating on.

OLL_MEMORY_BASE=https://<oll-memory>
OLL_MEMORY_SERVICE_TOKEN=<from step 6>      # server-only — NOT NEXT_PUBLIC_
OLL_MODEL_BASE=https://model.oll.am
OLL_MODEL_SERVICE_TOKEN=<model token>       # server-only — NOT NEXT_PUBLIC_
CORE_API_BASE=https://core.oll.am
AUTH_ENABLED=true                             # prod gating ON

Create the ollwrite product + price in Stripe, wire Core checkout

Why: the product's /api/checkout is a 501 stub today — it must call Core's real checkout-session endpoint at the Stage-0 price. Then the Pro dial (Claude / 70b) gates on the plan read live from /api/auth/me.

Do: create the product + price in Stripe → replace the 501 stub with a Core checkout-session call → confirm the Pro dial is gated on plan==='pro'.

Flip test→live keys, add the live webhook

Why: real cards need the live Stripe keys and a live webhook so a completed payment flips the plan to Pro. Without the webhook + secret, payment succeeds but the plan never upgrades.

# Core (or the ollwrite billing env) — swap test → live
STRIPE_SECRET_KEY=sk_live_…
STRIPE_WEBHOOK_SECRET=whsec_…          # from the LIVE webhook endpoint
# create the live webhook in the Stripe console → the billing/webhook path

Run the live-payment e2e drill

Why: the only proof that matters — a real card, a real charge, the plan flips to Pro and the Claude / 70b dial unlocks. This is the first-stranger-dollar gate.

Do: pay with a real card end-to-end → confirm /api/auth/me returns plan: pro → confirm the Pro dial is now usable. (Refund your own test charge after.)