Deployment Guide

HASSAR.AI consists of two independently deployed components that connect at runtime:

Next.js's App Router (SSR, dynamic routes) needs a real request-handling runtime, not just static file hosting. Cloudflare Pages' native Next.js preset only serves the .next build output as static assets and does not run Next.js's Functions runtime — that build 404s on every route. The frontend is deployed as a Cloudflare Worker via the OpenNext adapter instead, which correctly bundles the app to run server-side on Cloudflare.

1. Log in to Cloudflare Dashboard → Compute (Workers) → Workers & Pages
2. Click Create application
3. Click the small "Get started" link under "Looking to deploy Pages?" — this wording is misleading, but it's the entry point for a Git-connected build. Do not use the plain "Ship something new" wizard, which defaults to a bare wrangler deploy Worker scaffold
4. Continue with GitHub → authorise → select repository VlassStudio/HassarAI

Add a build variable:

Click Deploy. The first build takes 1–2 minutes. Cloudflare assigns a *.workers.dev URL — verify the app loads there before attaching the custom domain.

1. In the Worker's Domains tab → Add Domain → enter hassar.ai. If Cloudflare shows "No zones match" even though the zone exists, click Onboard domain anyway and continue through the flow — this warning is cosmetic in most cases
2. For www.hassar.ai: attaching it directly as a Custom Domain on the Worker can silently fail (the same "no zones match" step not completing). The reliable path is a Redirect Rule instead — under the hassar.ai zone → Rules → Redirect Rules → Create rule, use the built-in "Redirect from WWW to root" template as-is, then Deploy. This 301-redirects www.hassar.ai → hassar.ai
3. SSL is provisioned automatically once the domain is active

The repository is private. You've been added as a collaborator on VlassStudio/HassarAI, so a plain HTTPS clone will prompt for GitHub authentication — use a Personal Access Token as the password when prompted, or clone over SSH if you have a key set up on GitHub.

git clone https://github.com/VlassStudio/HassarAI.git
cd HassarAI/backend

python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt

Using the GitHub CLI instead (handles auth automatically once logged in via gh auth login):

gh repo clone VlassStudio/HassarAI
cd HassarAI/backend

sudo -u postgres psql

CREATE DATABASE hassarai;
CREATE USER hassarai_user WITH PASSWORD 'your-strong-password';
GRANT ALL PRIVILEGES ON DATABASE hassarai TO hassarai_user;
\q

Create /home/<user>/HassarAI/backend/.env:

DATABASE_URL=postgresql://hassarai_user:your-strong-password@localhost:5432/hassarai
JWT_SECRET_KEY=<random-string-minimum-64-characters>
APP_ENV=production

Create /etc/systemd/system/hassarai.service (replace <user> with your system username):

[Unit]
Description=HASSAR.AI Backend
After=network.target postgresql.service

[Service]
Type=simple
User=www-data
WorkingDirectory=/home/<user>/HassarAI/backend
EnvironmentFile=/home/<user>/HassarAI/backend/.env
ExecStart=/home/<user>/HassarAI/backend/venv/bin/uvicorn app.main:app --host 127.0.0.1 --port 8000 --workers 2
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload
sudo systemctl enable hassarai
sudo systemctl start hassarai
sudo systemctl status hassarai

sudo apt install nginx -y

Create /etc/nginx/sites-available/hassarai-api:

server {
    listen 80;
    server_name api.hassar.ai;

    location / {
        proxy_pass http://127.0.0.1:8000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header CF-Connecting-IP $http_cf_connecting_ip;
        proxy_read_timeout 120s;
    }
}

sudo ln -s /etc/nginx/sites-available/hassarai-api /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx

sudo apt install certbot python3-certbot-nginx -y
sudo certbot --nginx -d api.hassar.ai

Follow the prompts. Certbot auto-renews every 90 days.

Verify Backend

curl https://api.hassar.ai/
# Expected: {"ok": true}

1. Open https://hassar.ai/signup and register the first user
2. Promote to admin directly in the database:

sudo -u postgres psql hassarai

UPDATE users SET role = 'admin' WHERE email = 'your@email.com';
\q

1. Log in to https://hassar.ai with your admin account
2. Go to System Admin → AI Config
3. Enter the AGIM URL — the AGIM chat endpoint (e.g. https://api.hassar.ai/chat); confirm the exact path with whoever manages the AGIM server, as it depends on how it's exposed
4. Enter the AGIM API Key only if AGIM requires one — leave blank if not
5. Click Save
6. Open Talk to Jim and send a test message — confirm AGIM responds