Production Checklist

grep "DJANGO_DEBUG" .env
# Should show: DJANGO_DEBUG=False

python -c 'from django.core.management.utils import get_random_secret_key; print(get_random_secret_key())'

DJANGO_ALLOWED_HOSTS=*  # Insecure!

# Test HTTPS
curl -I https://yourdomain.com

# Check certificate
openssl s_client -connect yourdomain.com:443 -servername yourdomain.com

curl -I http://yourdomain.com
# Should return 301/302 redirect to https://

curl -I https://yourdomain.com | grep -i strict-transport
# Should show: Strict-Transport-Security: max-age=31536000; includeSubDomains

# Generate secure password
openssl rand -base64 32

# Bare metal
sudo -u postgres psql -d footycollect_db -U footycollect -c "SELECT 1;"

# Docker
docker compose -f docker-compose.production.yml exec postgres psql -U footycollect -d footycollect_db -c "SELECT 1;"

# Check backup directory
ls -lh /var/www/footycollect/backups/

# Test manual backup
sudo -u postgres pg_dump footycollect_db > test_backup.sql

# Test backup
docker compose -f docker-compose.production.yml exec postgres backup

# List backups
docker compose -f docker-compose.production.yml exec postgres backups

# Bare metal
redis-cli ping
# Should return: PONG

# Docker
docker compose -f docker-compose.production.yml exec redis redis-cli ping

# /etc/redis/redis.conf
requirepass your-redis-password

# Check storage backend
grep STORAGE_BACKEND .env

# For AWS S3
grep -E "DJANGO_AWS_" .env

# For Cloudflare R2
grep -E "CLOUDFLARE_" .env

# Verify configuration
python manage.py verify_staticfiles

# Collect static files
python manage.py collectstatic --noinput

# Check files are accessible
curl -I https://your-bucket.s3.amazonaws.com/static/css/styles.css

npx wrangler r2 bucket cors set your-bucket-name --file deploy/r2-cors-wrangler.json

# Django shell
python manage.py shell

from django.core.mail import send_mail

send_mail(
    'Test Email',
    'This is a test email from FootyCollect.',
    'noreply@yourdomain.com',
    ['your-email@example.com'],
    fail_silently=False,
)

python manage.py shell

from sentry_sdk import capture_message
capture_message("FootyCollect production test")

curl -I https://yourdomain.com

# Check UFW status
sudo ufw status verbose

# Should show:
# - 22/tcp (SSH) ALLOW
# - 80/tcp (HTTP) ALLOW
# - 443/tcp (HTTPS) ALLOW
# - Default: deny incoming, allow outgoing

# Verify only required ports exposed
docker compose -f docker-compose.production.yml ps
# Should show 80:80, 443:443

# Check fail2ban is active
sudo systemctl status fail2ban

# Check SSH jail
sudo fail2ban-client status sshd

sudo systemctl restart sshd

sudo systemctl status gunicorn
sudo systemctl status nginx
sudo systemctl status postgresql
sudo systemctl status redis

docker compose -f docker-compose.production.yml ps
# All services should show "Up"

# Basic health check
curl https://yourdomain.com/health/
# Should return: {"status": "ok"}

# Readiness check (includes DB)
curl https://yourdomain.com/ready/
# Should return: {"status": "ready"}

# Visit admin URL
curl -I https://yourdomain.com/your-admin-url/
# Should return 200 OK or 302 redirect to login

python manage.py check --deploy

python manage.py check --deploy 2>&1 | grep -E "WARNING|ERROR"

# Install Apache Bench
sudo apt-get install apache2-utils

# Test 100 requests, 10 concurrent
ab -n 100 -c 10 https://yourdomain.com/