Environment Settings:
Ensure
APP_ENV
is set to production in.env
.Set
APP_DEBUG
to false.
API Tokens:
Verify that API keys and tokens are set to production values.
Ensure that sensitive keys are not exposed.
Database:
Confirm the live database is properly configured in
.env
.Ensure database credentials are secure.
Test Data:
- Ensure all test data are cleaned (e.g.. Old Storage files/directories, Laravel Log files, etc)
SEO Settings:
Ensure meta tags are set for all pages.
Verify that the sitemap is generated and accessible.
Confirm that the
robots.txt
file is correctly configured.
Performance:
Ensure caching is enabled (CACHE_DRIVER).
Check that queues are set up correctly for background tasks.
Verify that the site passes performance audits (e.g., using tools like Blackfire).
Email Configuration:
Confirm email credentials in
.env
are for production.Test email functionality.
External API Configurations:
- Verify that all external API configurations in
.env
use production credentials.
- Verify that all external API configurations in
Security:
Ensure HTTPS is enabled.
Check that CSRF protection is enabled.
Validate Content Security Policy (CSP).
Check for any potential security vulnerabilities using tools like Laravel audit.
Deployment:
Ensure proper deployment process (e.g., Envoyer or other deployment tools).
Check for correct file permissions.
Run
php artisan config:cache
andphp artisan route:cache
.