Skip to content
popii

Production operations

Checklist

Section titled “Checklist”
  • Terminate TLS at the application or a trusted reverse proxy.
  • Set an HTTPS publicUrl.
  • Configure only the actual number of trusted proxy hops.
  • Mount persistent storage for popii.db and its WAL files.
  • Back up SQLite before migrations.
  • Monitor /health/live and /health/ready separately.
  • Preserve structured logs and request IDs.
  • Never log cookies, OAuth codes, tokens, or encryption keys.

Ephemeral filesystems are not safe for the production SQLite database. A multi-instance deployment requires a future shared-database/session design and is outside Popii 1.0’s supported web topology.