# Production deployment checklist

- APP_ENV=production
- APP_DEBUG=false
- HTTPS enabled
- Strong DB password
- Queue worker configured
- Scheduler cron configured
- OpenRouter key configured
- Merchant payment gateway credentials configured in admin panel
- Gateway callback URLs whitelisted by providers
- Admin password changed
- Storage permissions fixed: `storage` and `bootstrap/cache` writable
- Run: `php artisan config:cache && php artisan route:cache && php artisan view:cache`
- Take full backup before update