# Production Deployment Checklist

## Pre-Deployment

- [ ] All environment variables configured
- [ ] Database migrations run
- [ ] Secrets rotated and secured
- [ ] SSL certificates installed
- [ ] Domain names configured
- [ ] DNS records set up
- [ ] Load balancer configured
- [ ] CDN configured
- [ ] Monitoring dashboards set up
- [ ] Alerting rules configured
- [ ] Backup strategy tested
- [ ] Disaster recovery plan reviewed

## Security

- [ ] Security audit completed
- [ ] Penetration testing done
- [ ] Dependencies scanned (Snyk/Dependabot)
- [ ] API keys rotated
- [ ] Secrets in secure storage
- [ ] HSM configured (if applicable)
- [ ] Firewall rules configured
- [ ] IP whitelisting set up
- [ ] Rate limiting configured
- [ ] CORS policies set

## Database

- [ ] Database backups enabled
- [ ] Replication configured
- [ ] Encryption at rest enabled
- [ ] Connection pooling tuned
- [ ] Indexes optimized
- [ ] Retention policies set

## Monitoring

- [ ] Prometheus scraping configured
- [ ] Grafana dashboards imported
- [ ] Alerting channels configured
- [ ] Log aggregation set up
- [ ] Uptime monitoring active
- [ ] Error tracking (Sentry) configured

## Testing

- [ ] E2E tests passing
- [ ] Integration tests passing
- [ ] Load tests completed
- [ ] Security tests passed
- [ ] Accessibility tests passed

## Documentation

- [ ] API documentation published
- [ ] Runbooks reviewed
- [ ] Troubleshooting guide accessible
- [ ] User guide published
- [ ] Developer onboarding complete

## Compliance

- [ ] GDPR compliance verified
- [ ] Audit trails enabled
- [ ] Data retention policies active
- [ ] Compliance reporting configured

---

**Review Date**: _____________  
**Approved By**: _____________