The Apr 2026 SaaS migration moved tenant + workspace compute from Fly
Machines to AWS EC2, and the control plane from Fly to Railway. Update
docs that still claim Fly Machines as the production provisioner; leave
historical / changelog references intact.
Files changed:
- content/docs/architecture.mdx — SaaS Deployment Modes section now
states each tenant runs on a dedicated AWS EC2 instance provisioned by
the Railway-hosted control plane; adds an Apr 2026 migration note +
link to the molecule-controlplane README "Migration history".
- content/docs/tutorials/fly-machines-provisioner.md — preserved as
historical PR #501 lineage record; adds a DEPRECATED banner at the top
pointing to the EC2 provisioner (`internal/provisioner/ec2.go`) and
the controlplane migration history. Tutorial body kept untouched.
- content/docs/self-hosting/admin-token.mdx — drops the "Fly.io
(recommended for self-hosted)" framing since the SaaS no longer runs
on Fly. Adds a Railway example alongside the existing Fly.io example,
keeps both as illustrative options. Rotation steps generalised to "the
host's secrets store" (Railway, Fly.io, AWS Secrets Manager all work).
- content/docs/tutorials/saas-federation.md — security model table row
"No Fly/API tokens on tenant" → "No AWS/cloud API tokens on tenant" so
it matches the EC2 + Neon architecture the rest of the page already
describes.
Untouched on purpose:
- content/docs/changelog.mdx Phase 33 "Fly Machines provisioner" entry —
changelogs are historical record.
- content/docs/architecture/wildcard-dns-proxy.md — only references
Fly.io as a generic SaaS example, not as Molecule's infrastructure.
- content/docs/security/safe-mcp-advisory.mdx — `fly.toml` is one of
several illustrative deploy-target egress-lock examples for
self-hosters.
- content/docs/guides/external-workspace-quickstart.md — lists Fly /
Railway / DigitalOcean as example self-host targets for external
workspaces (still valid).
Source of truth: molecule-controlplane README "Migration history"
(https://github.com/Molecule-AI/molecule-controlplane#migration-history).
Verified: \`pnpm build\` (Next.js 16.2.4) — 111/111 static pages green.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
e55c44818d