feat(deploy): add Fly.io deployment configs and automation

Author: biru-codeastromer

.gitignore

@@ -21,6 +21,8 @@ htmlcov/
 *.log
 runs/*
 !runs/.gitkeep
+.tmp/
+worldmodel_gym.db
 paper/*.aux
 paper/*.bbl
 paper/*.blg

Makefile

@@ -2,7 +2,7 @@ VENV ?= .venv
 PYTHON ?= $(VENV)/bin/python
 PIP ?= $(VENV)/bin/pip
 
-.PHONY: setup test lint demo paper deploy stop
+.PHONY: setup test lint demo paper deploy stop deploy-fly
 
 setup:
 	python3 -m venv $(VENV)
@@ -43,3 +43,6 @@ deploy:
 
 stop:
 	./scripts/stop_local.sh
+
+deploy-fly:
+	./scripts/deploy_fly.sh

README.md

@@ -54,4 +54,5 @@ make test
 make paper
 make deploy
 make stop
+make deploy-fly
 ```

docker/web.fly.Dockerfile

@@ -0,0 +1,15 @@
+FROM node:20-alpine
+
+WORKDIR /app
+
+COPY web/package.json web/package-lock.json* /app/
+RUN npm ci
+
+COPY web /app
+
+ARG NEXT_PUBLIC_API_BASE
+ENV NEXT_PUBLIC_API_BASE=$NEXT_PUBLIC_API_BASE
+RUN npm run build
+
+EXPOSE 3000
+CMD ["npm", "run", "start", "--", "--hostname", "0.0.0.0", "--port", "3000"]

docs/DEPLOYMENT.md

@@ -0,0 +1,31 @@
+# Deployment
+
+## Fly.io
+
+This repo supports one-command Fly deployment for both API and web services.
+
+```bash
+make deploy-fly
+```
+
+Default app names:
+- API: `worldmodel-gym-api-biru`
+- Web: `worldmodel-gym-web-biru`
+
+Override names/region if needed:
+
+```bash
+API_APP=my-api-name WEB_APP=my-web-name REGION=iad make deploy-fly
+```
+
+What the script does:
+- creates Fly apps if missing
+- creates a persistent volume (`data`) for API sqlite storage
+- sets a random `WMG_UPLOAD_TOKEN` secret on API app
+- deploys API using `docker/server.Dockerfile`
+- deploys web using `docker/web.fly.Dockerfile`
+
+After deploy, it prints:
+- API URL
+- Web URL
+- upload token (store securely)

fly/api.fly.toml.tmpl

@@ -0,0 +1,26 @@
+app = "__API_APP__"
+primary_region = "iad"
+
+[build]
+  dockerfile = "docker/server.Dockerfile"
+
+[env]
+  WMG_DB_URL = "sqlite:////data/worldmodel_gym.db"
+  WMG_STORAGE_DIR = "/data/storage"
+
+[mounts]
+  source = "data"
+  destination = "/data"
+
+[http_service]
+  internal_port = 8000
+  force_https = true
+  auto_start_machines = true
+  auto_stop_machines = "stop"
+  min_machines_running = 0
+  processes = ["app"]
+
+[[vm]]
+  memory_mb = 1024
+  cpus = 1
+  cpu_kind = "shared"

fly/web.fly.toml.tmpl

@@ -0,0 +1,21 @@
+app = "__WEB_APP__"
+primary_region = "iad"
+
+[build]
+  dockerfile = "docker/web.fly.Dockerfile"
+
+[build.args]
+  NEXT_PUBLIC_API_BASE = "__API_BASE__"
+
+[http_service]
+  internal_port = 3000
+  force_https = true
+  auto_start_machines = true
+  auto_stop_machines = "stop"
+  min_machines_running = 0
+  processes = ["app"]
+
+[[vm]]
+  memory_mb = 1024
+  cpus = 1
+  cpu_kind = "shared"

scripts/deploy_fly.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+FLYCTL="${FLYCTL:-$HOME/.fly/bin/flyctl}"
+API_APP="${API_APP:-worldmodel-gym-api-biru}"
+WEB_APP="${WEB_APP:-worldmodel-gym-web-biru}"
+REGION="${REGION:-iad}"
+
+if [[ ! -x "$FLYCTL" ]]; then
+  echo "flyctl not found at $FLYCTL"
+  exit 1
+fi
+
+cd "$ROOT_DIR"
+mkdir -p .tmp/fly
+
+if ! "$FLYCTL" auth whoami >/dev/null 2>&1; then
+  echo "Not authenticated with Fly. Run: $FLYCTL auth login"
+  exit 1
+fi
+
+ensure_app() {
+  local app_name="$1"
+  if ! "$FLYCTL" apps list | awk '{print $1}' | grep -qx "$app_name"; then
+    "$FLYCTL" apps create "$app_name"
+  fi
+}
+
+ensure_app "$API_APP"
+ensure_app "$WEB_APP"
+
+if ! "$FLYCTL" volumes list -a "$API_APP" | awk 'NR>1{print $1}' | grep -qx "data"; then
+  "$FLYCTL" volumes create data --app "$API_APP" --region "$REGION" --size 1
+fi
+
+API_TOKEN="$(openssl rand -hex 24)"
+"$FLYCTL" secrets set WMG_UPLOAD_TOKEN="$API_TOKEN" --app "$API_APP"
+
+API_TOML=".tmp/fly/api.fly.toml"
+WEB_TOML=".tmp/fly/web.fly.toml"
+API_BASE="https://${API_APP}.fly.dev"
+
+sed "s/__API_APP__/${API_APP}/g" fly/api.fly.toml.tmpl > "$API_TOML"
+sed -e "s/__WEB_APP__/${WEB_APP}/g" -e "s|__API_BASE__|${API_BASE}|g" fly/web.fly.toml.tmpl > "$WEB_TOML"
+
+"$FLYCTL" deploy --config "$API_TOML" --app "$API_APP" --remote-only
+"$FLYCTL" deploy --config "$WEB_TOML" --app "$WEB_APP" --remote-only
+
+echo
+
+echo "Fly deployment complete"
+echo "API: https://${API_APP}.fly.dev"
+echo "WEB: https://${WEB_APP}.fly.dev"
+echo "WMG_UPLOAD_TOKEN: $API_TOKEN"

server/worldmodel_server/main.py

@@ -5,6 +5,7 @@
 from pathlib import Path
 
 from fastapi import Depends, FastAPI, File, Header, HTTPException, Query, UploadFile
+from fastapi.middleware.cors import CORSMiddleware
 from fastapi.responses import FileResponse
 from sqlalchemy import desc, select
 from sqlalchemy.orm import Session
@@ -16,6 +17,13 @@
 from worldmodel_server.storage import ensure_storage_dirs, load_json, run_dir, save_upload_file
 
 app = FastAPI(title=settings.app_name)
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_credentials=False,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
 
 
 @app.on_event("startup")