Quick start
Services
Configuration
Environment variables
API configuration
Docker
API only
Build and run
Kubernetes
🏢 Enterprise Support Coming Soon: Managed hosting, dedicated support, and SLA guarantees. Contact support@qwedai.com
Scaling
Horizontal scaling
- Stateless API servers behind load balancer
- Redis for distributed rate limiting
- PostgreSQL with read replicas
Performance tuning
Monitoring
Health check
Prometheus metrics
GET /metrics/prometheus (the Prometheus text exposition format — /metrics returns JSON). The endpoint requires a platform operator: create a dedicated scraper account, add its user ID to QWED_METRICS_OPERATOR_USER_IDS (fail-closed when unset — every caller is denied, including org owners/admins), mint the account an API key, and send it as a header on the scrape. See All-tenant metrics authorization.
Security
- Always use HTTPS in production
- Set
API_KEY_SECRET— mandatory, no default value - Set
QWED_CORS_ORIGINS— mandatory, explicitly list allowed origins - Set strong API keys
- Enable rate limiting
- Use network isolation
- Rotate secrets regularly
- Configure
QWED_METRICS_OPERATOR_USER_IDSif anything needs all-tenant metrics — unset means deny-all