Secrets, Backups and the Boring Stuff

The features are the fun part. The boring stuff is what keeps a business app alive. If you skip it, the first bad day takes the business down with the app.

Here is the minimum checklist we use before calling anything "production".

Secrets

• All API keys and passwords live in environment variables (.env), never in code.
• .env is in .gitignore. Check with git log --all -- .env that it was never committed.
• Production uses different keys from development.
• You know how to rotate each key and you've written it down.

Ask your AI: *"Search this codebase for hard...