# OGSG Production Deployment Checklist

- Set production values from `.env.production.example`; never deploy with `APP_DEBUG=true`, `QUEUE_CONNECTION=sync`, or `MAIL_MAILER=log`.
- Run one queue worker process for the default queue and monitor failed jobs.
- Run the Laravel scheduler every minute with `php artisan schedule:run`.
- Confirm `php artisan app:scheduler-heartbeat` is being refreshed by the scheduler.
- Configure encrypted secure sessions, HTTPS at the proxy, HSTS, and trusted proxy forwarding.
- Configure backups and error monitoring, then run `php artisan app:production-readiness`.
- Keep exported reports on the private disk and serve them only through authorized download routes.