Skip to main content
This guide deploys Reactive Resume to your own Vercel project with the Deploy with Vercel wizard. The wizard connects a database, file storage, and Redis for you; you supply two secrets. Use it when you want a managed deployment without running servers. If you’d rather run containers, see Self-hosting with Docker. Both run the same application and data format.

​
How the deployment is laid out

The repository’s vercel.json defines two Vercel Services in one project: Top-level rewrites decide which service answers a request. They’re checked in order, and the first match wins:
  1. /api/*, /uploads/*, /mcp, /.well-known/*, and /index.html, /robots.txt, /sitemap.xml, /llms.txt, /schema.json go to backend.
  2. Any other path whose last segment has a file extension (/assets/app.js, /favicon.ico) goes to frontend.
  3. Everything else, including every page address such as /dashboard or /alex/resume, goes to backend, which returns the HTML shell with the right metadata.
Keep the committed rewrites in vercel.json. They replace an SPA fallback, so don’t add one. The configuration also schedules career work once a minute. This requires Vercel Pro or Enterprise; Hobby deployments must change the cron schedule to 0 0 * * * before deploying. Daily ticks delay time-sensitive reminders and preparation. See Vercel Cron limits.

​
Before you start

You need:
  • A Vercel account and a GitHub account.
  • Two independent random secrets, AUTH_SECRET and ENCRYPTION_SECRET. Generate each one separately:
    Keep both in a password manager. They must stay the same for the life of the installation: AUTH_SECRET signs sessions and tokens, and ENCRYPTION_SECRET encrypts the AI provider keys people save. Losing ENCRYPTION_SECRET makes those keys unreadable.
The wizard connects three Vercel Marketplace services: Quotas and permitted use depend on your Vercel, Neon, and Upstash plans. Check Vercel’s Function limits, Neon, and Upstash before you pick a plan, and turn off automatic paid upgrades if you want to stay inside a free allowance.
The assistant stops working on a reply after four minutes. This keeps the reply, plus saving and cleanup, inside Vercel Hobby’s five-minute Function limit. The limit applies to each message, not to the whole conversation, and Docker uses the same limit.

​
Deploy

1

Start the wizard

Select the button:Deploy with Vercel
2

Choose the Git scope

On Hobby, select your personal GitHub account. Private repositories owned by a GitHub organization need Vercel Pro.
3

Connect the services

Approve Neon, Upstash, and Blob. Set Blob access to private. Pick regions close to each other and to the Function region (iad1 by default).
4

Enter the secrets

Paste AUTH_SECRET and ENCRYPTION_SECRET.
5

Deploy

Set Framework Preset to Services. Keep the project root at the repository root and keep the committed vercel.json. Don’t select the apps/web subdirectory.The backend build compiles both apps, then runs apps/server/dist/prepare-deployment.mjs, which checks the configuration and applies database migrations before the deployment goes live. You don’t run migrations yourself.
Don’t paste Docker’s .env.example into Vercel. Its local URLs and S3 settings select the wrong services, and the build refuses any storage other than Blob.

​
Check the deployment

  1. Open https://<your-project>.vercel.app/api/health. database, storage, and redis should each report "status": "healthy", and version shows the release you deployed. A sleeping Neon database can fail the first check; retry once.
  2. Open the production domain and create an account.
  3. Optional: to use AI features, each person adds their own provider under Settings → AI.
  4. Optional: configure SMTP for verification and password-reset emails. Without SMTP, emails are written to the Function logs.
  5. Optional: add Google, GitHub, LinkedIn, or your own identity provider. See Single sign-on (SSO) for the callback URLs.

​
Scheduled career work

Set a separate random CRON_SECRET (at least 16 characters) in the Production environment and redeploy. Generate it with openssl rand -hex 32. Vercel Cron sends GET /api/career/run with Authorization: Bearer <CRON_SECRET> automatically; no separate cron service is needed. Without this token, scheduling is unavailable and the HTTP runner is closed. Cron runs on production deployments. Users enable their own searches, preparation tasks, and reminders. Verify a due reminder after deployment; see career scheduling for delivery and retry limits.

​
Use a custom domain

  1. Add the domain to the Vercel project.
  2. Set APP_URL to the full origin, for example https://resume.example.com.
  3. Update the callback URL of every OAuth provider you configured.
  4. Redeploy.
Changing the domain doesn’t move stored files. They stay under the same DEPLOYMENT_NAMESPACE.

​
Update the deployment

Redeploy the same project, for example by syncing your fork. Keep its connected services and secrets unchanged.
  • Migrations run in the build step, never in the runtime Function. A database advisory lock serializes concurrent deployments.
  • Rolling back to an older deployment doesn’t roll back the database schema. Restore a database backup, or follow the rollback notes in the release’s upgrade guide.
Projects created before Reactive Resume used Vercel Services (v5.3 and earlier) must switch before they deploy v6. Open Settings → Build and Deployment, set Framework Preset to Services, save, and then redeploy. Vercel builds the services configuration only with this preset. Read Migrating from v5 before you redeploy.

​
Preview deployments

Preview builds refuse to run migrations by default, so untrusted preview code can’t change your production database. The build fails with “Preview deployment needs an isolated database” until you opt in. To enable previews:
  1. Connect separate Neon, Upstash, and Blob resources to the Preview environment.
  2. Set ALLOW_PREVIEW_MIGRATIONS=true for Preview only.
A storage namespace doesn’t isolate database rows. Never connect the production database to the Preview environment.

​
Back up your data

Back up the Neon database and the Blob store. Store AUTH_SECRET and ENCRYPTION_SECRET separately from those backups. Moving between Docker and Vercel doesn’t copy the database or files. Migrate both yourself.

​
Build locally

A local Vercel build applies migrations, so run it only against an isolated database.
Replace sensitive pulled values with local-only ones first. The CLI has no deployment hostname before publishing, so APP_URL is required here; cloud builds set it automatically.

​
Vercel-specific variables

On Vercel, the server reads the variables that Marketplace integrations inject. A variable you set explicitly always wins over these fallbacks. For everything else (SMTP, OAuth providers, feature flags), see Environment variables.

​
Upload limits

Vercel limits Function request bodies to 4.5 MB. The web app sends larger requests through private Blob staging, so the application’s own limits still apply:
  • Uploads (pictures and files): 10 MB per file.
  • Assistant attachments: 25 MiB per file and 100 MiB per conversation.
Blob objects are never public. The server serves public pictures and checks access to private files itself. API clients that send large RPC requests must follow the large RPC requests protocol. REST (/api/openapi) and MCP request bodies stay subject to the 4.5 MB limit.

​
Troubleshooting