Know what is connected.
Configuration presence is shown below. A configured credential does not establish a successful live authentication, database, storage or job-service test.
database
Environment configuredauthentication
Environment configuredverificationEmail
Environment configuredprivateStorage
Environment configureddurableJobs
Environment configureddocumentationPayments
Activation requiredActivation steps
- Configure BETTER_AUTH_SECRET separately for each environment. Authentication and authenticator MFA run inside RackBT using Better Auth and PostgreSQL.
- Configure Gmail SMTP or Resend for verification emails. Create your RackBT account, verify your email, enroll an authenticator in Account security, and then create your organization. No paid MFA plan is required.
- Configure separate pooled DATABASE_URL and direct migration URL for development, preview and production. Apply reviewed Drizzle migrations before enabling the workspace.
- Connect a private Blob store per environment and set BLOB_READ_WRITE_TOKEN.
- Activate Inngest, set its event/signing keys, and sync /api/inngest. Live database session and membership checks handle access revocation.
- For the optional $99 technician documentation package, configure STRIPE_SECRET_KEY and STRIPE_WEBHOOK_SECRET. Register a Stripe webhook for checkout.session.completed and checkout.session.async_payment_succeeded at https://rackbt.com/api/payments/stripe-webhook. Payment unlocks the package for that saved scenario; the builder remains free.
- Test sign-in, invitation acceptance, scoped project access, server calculation, report job and download with isolated test identities.
No private operation is available through the public local sandbox. Setup does not introduce an authentication bypass.
Module map
| Module | Status | Permission |
|---|---|---|
| Projects | Implemented service | projects.read, projects.create, projects.update, projects.delete, projects.share |
| Models & workloads | Implemented service | workloads.read, workloads.manage |
| Hardware catalogs | Implemented service | catalog.read, catalog.manage |
| Benchmark evidence | Implemented service | benchmarks.read, benchmarks.import |
| Inference sizing | Implemented service | inference.read, inference.run |
| Training & fine tuning | Concept calculations; engineering validation required | training.read, training.run |
| Network design | Concept calculations; engineering validation required | network.read, network.design |
| Storage sizing | Concept calculations; engineering validation required | storage.read, storage.design |
| Power & cooling | Concept calculations; engineering validation required | power_cooling.read, power_cooling.design |
| Rack & facility | Concept calculations; engineering validation required | facility.read, facility.design |
| Pricing & TCO | Concept calculations; engineering validation required | pricing.read, pricing.manage, tco.run |
| Reports & exports | Implemented service | reports.read, reports.generate, reports.export |
| Organization & users | Implemented service | members.read, members.invite, members.manage, roles.read, roles.manage, organization.manage |
| Audit & operations | Implemented service | audit.read |
| Technician build layout | Implemented service | facility.read |
Measured acceptance targets
LCP ≤2.5 s, INP ≤200 ms, CLS ≤0.1 at p75; indexed reads p95 <500 ms; one scenario calculation <1 s. These are targets pending documented load and field measurements.
Report jobs use bounded retries, private output and permission checks at submission, execution, publication and download. Access changes are checked on the next operation; an already streaming download cannot be recalled.
External services have separate plan and usage limits. Confirm current provider pricing, backup retention and email sending limits before production onboarding.