Auth, Stripe subscriptions, Postgres, Docker, CI/CD and Azure infrastructure, already built and tested. You write the product, not the plumbing.
Get the code → See what's insideOne-time purchase · Build unlimited products · Runs on Azure for under €30/month
Extracted from a production app that takes real payments. Not written for a tutorial.
Email/password plus Google OAuth via Authlib. Password reset with hashed single-use tokens, JWT revocation on reset, rate limiting per IP, and no email enumeration. The security model is written down in the docs, with a test for each property.
Checkout, customer portal, and webhook-driven sync. The local database mirrors Stripe the way Stripe recommends, so retries, cancellations and dashboard refunds all work. Gating a route behind payment is one dependency.
SQLAlchemy 2.0 typed models and Alembic migrations that are tested against a real Postgres, not SQLite. The session pattern works in tests, containers and background jobs.
Bicep modules for Container Apps with scale-to-zero, Postgres Flexible Server, Key Vault, ACR and Log Analytics. One script deploys everything. A budget alert is wired in so the bill can't surprise you.
GitHub Actions run lint, tests and Docker builds on every push. Infra deploys use OIDC federation, so no cloud credentials are stored in GitHub.
Full auth flows, the whole Stripe webhook lifecycle (subscribe, access granted, cancel, access revoked), rate limiting, token revocation. You can change things without being scared.
Two dependencies cover the whole access model: CurrentUser for logged-in users, Subscriber for paying ones. Stripe webhooks keep them honest.
# your_product.py
from app.api.deps import CurrentUser, Subscriber
@router.get("/reports")
def reports(user: CurrentUser):
# any signed-in user
...
@router.get("/reports/export")
def export(user: Subscriber):
# paying customers only
...Costs about half a day of contract work. Saves the weeks of setup.
Nearly every boilerplate targets Next.js and Vercel. If your stack is Python and your company or clients live on Azure, FastForge is built for exactly that. The whole setup runs under €30/month, and close to €0 while idle.
No. FastForge ships dependency-free landing, account, and password-reset pages so you can launch without a build step. The backend is a clean JSON API, so you can add React/Vue/Svelte later without touching it.
bcrypt passwords, JWT revocation via token versioning, hashed single-use reset tokens, verified-email-only OAuth linking, rate limiting on every auth endpoint, and identical error responses to prevent enumeration. The full security model is documented in the repo.
Yes. The license allows unlimited products, commercial or not. The only thing you can't do is resell or republish the boilerplate itself.
Email me within 30 days for a full refund.