Production checklist
- Set
NEXT_PUBLIC_APP_URLto your public domain. - Use HTTPS (TLS) at your reverse proxy or hosting platform.
- Configure database backups and storage bucket backups.
- Configure SMTP or Resend for auth and submission emails.
- Set
ALLOW_SIGNIN_SIGNUP=falseif you want to restrict new accounts. - Add rate limiting at the edge for
/s/*endpoints.
Build and run
Reverse proxy headers (Nginx)
Use a staging environment when upgrading. Form submissions are real data, and rollbacks should be tested.