# Deployment

Let's deploy the todo app to Heroku (opens new window).

# Prepare for Production

In this tutorial, we'll deploy both the Angular app and the API server as one server-side app (opens new window), and redirect all non-API requests to return the Angular app.

In addition, to follow a few basic production best practices, we'll use compression (opens new window) middleware to improve performance, helmet (opens new window) middleware for security CSRF to protect the api and redirect all non-HTTPS requests to HTTPS using heroku-ssl-redirect (opens new window)

  1. Install compression, helmet, csurf, cookie-parser and heroku-ssl-redirect.
npm i compression helmet heroku-ssl-redirect csurf cookie-parser
npm i @types/compression @types/csurf @types/cookie-parser --save-dev
  1. Add the highlighted code lines to src/server/index.ts, and modify the app.listen function's port argument to prefer a port number provided by the production host's PORT environment variable.






import express from "express";
import { api } from "./api";
import session from "cookie-session";
import { auth } from "./auth";
import helmet from 'helmet';
import compression from 'compression';
import sslRedirect from 'heroku-ssl-redirect';
import path from 'path';
import csrf from "csurf";
import cookieParser from "cookie-parser";

const app = express();
    secret: process.env['SESSION_SECRET'] || "my secret"
app.use(helmet({ contentSecurityPolicy: false }));
app.use("/api", cookieParser());
app.use('/api', csrf({ cookie: true }));
app.use("/api", (req, res, next) => {
    res.cookie("XSRF-TOKEN", req.csrfToken());

app.use(express.static(path.join(__dirname, '../remult-angular-todo')));
app.get('/*', function (req, res) {
   res.sendFile(path.join(__dirname, '../remult-angular-todo', 'index.html'));
app.listen(process.env["PORT"] || 3002, () => console.log("Server started"));
  1. Modify the highlighted code in the api server module to only use Postgres in production, and keep using the simple JSON db in our dev environment.



    export const api = remultExpress({
         dataProvider: process.env["NODE_ENV"] === "production" ?
                 configuration: "heroku"
             }) : undefined,

    The { configuration: "heroku" } argument passed to Remult's createPostgresConnection() tells Remult to use the DATABASE_URL environment variable as the connectionString for Postgres. (See Heroku documentation (opens new window).)

    In development, the dataProvider function returns undefined, causing Remult to continue to use the default JSON-file database.

  2. Add the highlighted lines to the server's TypeScript configuration file, to prepare it for production builds using TypeScript:



   "extends": "./tsconfig.json",
   "compilerOptions": {
      "module": "commonjs",
      "emitDecoratorMetadata": true,
      "noEmit": false,
      "outDir": "dist",
      "rootDir": "src"
   "include": [
  1. Modify the project's build npm script to additionally transpile the API server's TypeScript code to JavaScript (using tsc).


"build": "ng build && tsc -p tsconfig.server.json"
  1. Modify the project's start npm script to start the production Node.js server.


"start": "node dist/server/"

The todo app is now ready for deployment to production.

# Deploy to Heroku

In order to deploy the todo app to heroku (opens new window) you'll need a heroku account. You'll also need Git (opens new window) and Heroku CLI (opens new window) installed.

  1. Create a Heroku app.
heroku create
  1. Set the jwt authentication to something random - you can use an online UUID generator (opens new window).
heroku config:set SESSION_SECRET=random-secret
  1. Provision a dev postgres database on Heroku.
heroku addons:create heroku-postgresql:hobby-dev
  1. Commit the changes to git and deploy to Heroku using git push.
git add .
git commit -m "todo app tutorial"
git push heroku master
  1. Open the deployed app using heroku apps:open command.
heroku apps:open


If you run into trouble deploying the app to Heroku, try using Heroku's documentation (opens new window).

That's it - our application is deployed to production, play with it and enjoy.

Love Remult?  Give our repo a star.⭐