Notes/Deployment

Four Node processes behind IIS

2026-04-08

The TrustOS apps are meant to sit on IIS with ARR reverse-proxying to four local Node ports, started as Windows services. Docker Compose in that repo is for Keycloak sandbox and connector mocks, not for the product itself. OTP mail uses tenant SMTP if it exists, otherwise platform SMTP. If neither is configured, the send is skipped. A fake “sent” status on a compliance product is worse than a visible failure. Razorpay is the same idea: HMAC on the live webhook, a labelled SANDBOX path when keys are missing. Billing must not look paid because the UI posted success. Workers run inside the API process on intervals. There is no separate worker service to forget to start — and also no extra machine to scale independently. That is a deploy tradeoff, not an accident.