postgresql://username:password@ep-xxx.us-east-2.aws.neon.tech/main?sslmode=require

# 如果尚未初始化 Git
git init
git add .
git commit -m "Initial commit"

# 推送到 GitHub
git remote add origin https://github.com/your-username/your-repo.git
git push -u origin main

# 数据库
DATABASE_URL="postgresql://user:password@host/db?sslmode=require"

# Better Auth
BETTER_AUTH_SECRET="至少32字符的随机密钥"
BETTER_AUTH_URL="https://yourdomain.com"  # 使用实际域名
BETTER_AUTH_TRUSTED_ORIGINS="https://yourdomain.com,https://preview.yourdomain.com"

# 火山引擎 (AI 服务)
VOLCANO_ENGINE_API_KEY="your-volcano-engine-api-key"
VOLCANO_ENGINE_API_URL="https://ark.cn-beijing.volces.com/api/v3"

# Creem 支付
CREEM_API_KEY="your-creem-api-key"
CREEM_WEBHOOK_SECRET="whsec_your_webhook_secret"

# Resend 邮件
RESEND_API_KEY="re_your_api_key"
RESEND_FROM_EMAIL="Your App <noreply@yourdomain.com>"

# 定时任务认证
CRON_SECRET="生成一个随机密钥"

# 应用 URL
NEXT_PUBLIC_APP_URL="https://yourdomain.com"

# Google OAuth (如果启用)
AUTH_GOOGLE_ID="your-google-client-id"
AUTH_GOOGLE_SECRET="your-google-client-secret"

# 分析工具
NEXT_PUBLIC_POSTHOG_KEY="phc_your_posthog_key"
NEXT_PUBLIC_GOOGLE_ANALYTICS_ID="G-XXXXXXXXXX"
NEXT_PUBLIC_CLARITY_PROJECT_ID="your_clarity_id"

# S3 存储 (如果使用)
STORAGE_ENDPOINT="https://s3.amazonaws.com"
STORAGE_BUCKET="your-bucket-name"
STORAGE_ACCESS_KEY_ID="your-access-key"
STORAGE_SECRET_ACCESS_KEY="your-secret-key"
STORAGE_REGION="us-east-1"

# 方法 1: OpenSSL
openssl rand -base64 32

# 方法 2: Node.js
node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"

{
  "buildCommand": "pnpm build",
  "devCommand": "pnpm dev",
  "installCommand": "pnpm install",
  "framework": "nextjs",
  "regions": ["iad1"],
  "functions": {
    "app/api/**/*.ts": {
      "maxDuration": 60
    }
  }
}

https://your-project.vercel.app

# 安装 Creem CLI
npm install -g @creem/cli

# 登录
creem login

# 转发 webhook 到本地 (用于开发测试)
creem listen --forward-to localhost:3000/api/payments/creem/webhook

import { verifyWebhookSignature } from '@/lib/payments/creem';

const signature = request.headers.get('creem-signature');
const rawBody = await request.text();

const isValid = verifyWebhookSignature(rawBody, signature, webhookSecret);

if (!isValid) {
  return NextResponse.json({ error: 'Invalid signature' }, { status: 401 });
}

{
  "crons": [
    {
      "path": "/api/cron/grant-subscription-credits",
      "schedule": "0 * * * *"
    }
  ]
}

分 时 日 月 周
0  *  *  *  *  → 每小时整点执行
0  0  *  *  *  → 每天午夜执行
0  */6 * *  *  → 每 6 小时执行

// app/api/cron/grant-subscription-credits/route.ts
export async function GET(request: NextRequest) {
  // 验证 Vercel Cron Secret
  const authHeader = request.headers.get('authorization');
  if (authHeader !== `Bearer ${process.env.CRON_SECRET}`) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  // 执行积分发放逻辑
  // ...
}

CRON_SECRET="生成一个随机密钥"

import { NextRequest } from 'next/server';

export async function GET(request: NextRequest) {
  // 验证请求来自 Vercel Cron
  const cronSecret = request.headers.get('x-vercel-cron-secret');
  if (cronSecret !== process.env.CRON_SECRET) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  // ...
}

curl -X GET \
  http://localhost:3000/api/cron/grant-subscription-credits \
  -H "Authorization: Bearer YOUR_CRON_SECRET"

git clone https://github.com/your-username/your-repo.git
cd your-repo

export DATABASE_URL="postgresql://user:password@host/db?sslmode=require"

Enter admin email: admin@yourdomain.com
Enter admin password: ********
Enter admin name: Admin User

SELECT id, email, role FROM "user" WHERE email = 'your-email@example.com';

UPDATE "user"
SET role = 'admin'
WHERE email = 'your-email@example.com';

SELECT id, email, role FROM "user" WHERE email = 'your-email@example.com';

#!/bin/bash

echo "Checking production environment variables..."

# 必需变量列表
REQUIRED_VARS=(
  "DATABASE_URL"
  "BETTER_AUTH_SECRET"
  "BETTER_AUTH_URL"
  "VOLCANO_ENGINE_API_KEY"
  "CREEM_API_KEY"
  "CREEM_WEBHOOK_SECRET"
  "RESEND_API_KEY"
  "RESEND_FROM_EMAIL"
  "CRON_SECRET"
  "NEXT_PUBLIC_APP_URL"
)

# 检查每个变量
for var in "${REQUIRED_VARS[@]}"; do
  if [ -z "${!var}" ]; then
    echo "❌ Missing: $var"
  else
    echo "✅ Set: $var"
  fi
done

/** @type {import('next').NextConfig} */
const nextConfig = {
  // 启用静态导出 (部分页面)
  output: 'standalone',

  // 图片优化
  images: {
    domains: ['yourdomain.com'],
    formats: ['image/avif', 'image/webp'],
  },

  // 压缩
  compress: true,

  // React 严格模式
  reactStrictMode: true,

  // 生产环境禁用 source map
  productionBrowserSourceMaps: false,
};

export default nextConfig;

# Neon 自动使用连接池
DATABASE_URL="postgresql://user:pass@ep-xxx.pooler.us-east-2.aws.neon.tech/main"

const nextConfig = {
  async headers() {
    return [
      {
        source: '/(.*)',
        headers: [
          {
            key: 'X-Frame-Options',
            value: 'DENY',
          },
          {
            key: 'X-Content-Type-Options',
            value: 'nosniff',
          },
          {
            key: 'Referrer-Policy',
            value: 'strict-origin-when-cross-origin',
          },
        ],
      },
    ];
  },
};

pnpm add @upstash/ratelimit @upstash/redis

// lib/rate-limit.ts
import { Ratelimit } from '@upstash/ratelimit';
import { Redis } from '@upstash/redis';

export const ratelimit = new Ratelimit({
  redis: Redis.fromEnv(),
  limiter: Ratelimit.slidingWindow(10, '1 m'), // 10 次/分钟
});

import { ratelimit } from '@/lib/rate-limit';

export async function POST(request: NextRequest) {
  const identifier = request.ip ?? 'anonymous';
  const { success } = await ratelimit.limit(identifier);

  if (!success) {
    return NextResponse.json(
      { error: 'Too many requests' },
      { status: 429 }
    );
  }

  // 处理请求
}

import { Analytics } from '@vercel/analytics/react';

export default function RootLayout({ children }) {
  return (
    <html>
      <body>
        {children}
        <Analytics />
      </body>
    </html>
  );
}

pnpm add @sentry/nextjs

// sentry.client.config.ts
import * as Sentry from '@sentry/nextjs';

Sentry.init({
  dsn: process.env.NEXT_PUBLIC_SENTRY_DSN,
  environment: process.env.NODE_ENV,
  tracesSampleRate: 0.1,
});

# 手动备份
pg_dump "postgresql://user:pass@host/db" > backup-$(date +%Y%m%d).sql

# 恢复备份
psql "postgresql://user:pass@host/db" < backup-20251015.sql

git push origin main

// app/api/hello/route.ts
export const runtime = 'edge'; // 启用边缘运行时

export async function GET() {
  return new Response('Hello from Edge!');
}

import { Redis } from '@upstash/redis';

const redis = Redis.fromEnv();

// 缓存用户积分
export async function getUserCredits(userId: string) {
  const cached = await redis.get(`credits:${userId}`);
  if (cached) return cached;

  const credits = await db.query.user.findFirst({
    where: eq(user.id, userId),
    columns: { credits: true },
  });

  await redis.set(`credits:${userId}`, credits, { ex: 300 }); // 缓存 5 分钟
  return credits;
}

# 清理缓存并重新安装
rm -rf node_modules .next
pnpm install
pnpm build