Before launch.
CONFIGURATION
Environment set to production Debug mode off Application key set Application address correct Mail configured and tested
SECURITY
Configuration file not publicly reachable Only storage writable Request protection enabled Authorisation enforced on every record action Passwords hashed by the framework Rate limiting on sign-in
DATABASE
Credentials using cPanel prefixes Migrations run Backup taken and restore tested
STRUCTURE
Application outside the served directory Public contents in the served directory Storage link created
PERFORMANCE
Configuration, routes and events cached Class loader optimised Query counts checked on key pages
BACKGROUND WORK
Scheduler cron entry created and verified Queue processing arranged Failed job handling configured
VERIFICATION
Site loads, key paths tested on a phone Log clean Mail delivered to a major provider
