grx

Production hardening

Hub linking Security, Introspection, Limits, Deployment, and auth - bookmark-friendly URL preserved.

This site splits operational concerns into focused guides - Security, Introspection, Limits, plus Deployment - so navigation matches how teams reason about risk and shipping.

TopicGuide
SecuritySecurity - mask internal errors, operation/field authorizers, rate-limit hooks before resolvers run
IntrospectionIntrospection - disable __schema, retire GraphiQL, avoid accidental SDL export
LimitsLimits - HTTP body + variable caps, clocks, persisted/trusted query modes, selection guards
DeploymentDeployment - Docker, Compose, reverse proxies, Kubernetes, managed platforms

Cross-cutting identity patterns live in Authentication & authorization. Deep execution notes stay in Execution pipeline. Transport wiring is summarized in Routers & transports.

Edit this page on GitHub

Last updated on

How it fits together

Layers, packages, startup vs request path, and where to plug in transports, middleware, plugins, and authorizers.

Basic net/http integration

Run a grx handler on a standalone net/http listener.