Mack HQ
Back to sign in

Private deployment

Three things before Mack HQ goes online.

Set credentials

Add a strong MACK_HQ_PASSWORD and random MACK_HQ_SESSION_SECRET to the host’s secret store.

Mount durable data

Persist the app’s /data directory, or switch the provided store boundary to Supabase before serverless hosting.

Put it behind your edge

Use HTTPS and preferably Cloudflare Access as a second gate. The app already sets secure production cookies and defensive headers.