Fly.io

Not tested on Fly.io yet: the image is (see the verification table).

Add the Dockerfile and .dockerignore from Docker, then create the app with fly launch (it finds the Dockerfile; decline the database offers you do not need) and adjust the generated fly.toml:

# fly.toml
app = "my-app"
primary_region = "ams"

[env]
  NODE_ENV = "production"
  PORT = "3000"

[http_service]
  internal_port = 3000
  force_https = true
  auto_stop_machines = "stop"
  auto_start_machines = true
  min_machines_running = 0

[[http_service.checks]]
  grace_period = "10s"
  interval = "30s"
  method = "GET"
  timeout = "5s"
  path = "/"

Secrets go in with fly secrets set LUMIOSE_SECRET="$(openssl rand -base64 32)", then fly deploy. Fly's proxy terminates TLS and forwards the Host header, so request URLs are right without ORIGIN; ctx.platform.clientAddress is the proxy's address, and the client's is in the Fly-Client-IP header.

The adapter compresses responses itself; Fly's proxy passes them through.