Production checklist

Before public opening

• Domain configured.
• HTTPS enabled.
• Persistent MongoDB.
• Scheduled backups.
• First admin account created.
• Admin password changed.
• License active if required.
• Home page customised.
• /docs build validated.
• Public access tested.

Security

• No secrets in the repository.
• No secrets in shared screenshots.
• Portainer access protected.
• Admin accounts limited.
• Restore procedure tested.

Operations

• Record the deployed DockerHub tag.
• Keep the Compose file used in production.
• Check logs regularly.
• Test publishing after upgrades.
• Prepare a rollback procedure.