CI/CD for a solo founder

A solo founder doesn't need a complex pipeline — they need a predictable one. Minimum set: lint → test → build → deploy.

One path to prod

Every deploy goes through CI. No "quick SSH fix". Exceptions become the rule within a week.

Rollback in a minute

If deploy breaks prod — rollback should be one command or automatic on failed health check.

Secrets in CI, not in the repo

Env vars and keys — only in protected GitLab/GitHub variables. Build the image once, mount config at runtime.