# Production checklist

> Work through this list before you put real traffic on a 5050cloud install.

Work through this list before you put real traffic on a 5050cloud install.

## Host

1. Use a non-burstable VM size with enough RAM for every service plus about 1 GB for 5050cloud itself.
2. Attach a blank data disk before installing; the installer uses it for all state (`--data-disk auto`). See [Install options](https://5050cloud.com/docs/reference/install-options).
3. Keep unattended security updates on (the default). Plan reboots: see [Upgrading and host maintenance](https://5050cloud.com/docs/guides/upgrading).
4. Turn on the firewall with `--firewall`, or allow only SSH, 80, 443 and UDP 51820 between hosts in your cloud firewall. See [Ports and firewall](https://5050cloud.com/docs/reference/ports-firewall).

## Backups

1. Store the recovery key from `/etc/5050/recovery-key.txt` in a password manager. Without it, backups cannot be decrypted.
2. In **Settings > Backups**, set an S3-compatible bucket and select **Test connection**. Use a separate retention key and turn on bucket versioning. See [Backups and restore](https://5050cloud.com/docs/guides/backups).
3. Check that every database shows backups on, not the "Backups off" badge.
4. With a bucket set, the control plane state streams to it continuously. See [Backing up the control plane](https://5050cloud.com/docs/guides/control-plane-backup).

## Domains and HTTPS

1. Use your own domain with a wildcard A record (`--domain`) so names do not depend on your IP.
2. Add custom domains and wait for **Active**. See [Custom domains and HTTPS](https://5050cloud.com/docs/guides/custom-domains).
3. Behind Cloudflare, set SSL/TLS mode to Full (strict). See [Behind Cloudflare](https://5050cloud.com/docs/guides/behind-cloudflare).

## Services

1. Set a health check path for every web service. See [Health checks](https://5050cloud.com/docs/guides/health-checks).
2. Run 2 replicas for web services that must not drop requests during deploys. See [Replicas and zero-downtime deploys](https://5050cloud.com/docs/guides/replicas-zero-downtime).
3. Set memory limits so one service cannot starve the rest.
4. Turn on **Use all cores** for single-process runtimes such as Node. See [Use all cores](https://5050cloud.com/docs/guides/use-all-cores).
5. Put database migrations in a pre-deploy command. See [Pre-deploy migrations](https://5050cloud.com/docs/guides/pre-deploy).

## People and alerts

1. Configure SMTP so password resets and alerts reach you. See [Email and notifications](https://5050cloud.com/docs/guides/email-notifications).
2. Require 2FA for everyone in **Settings > Members**. See [Members, roles and 2FA](https://5050cloud.com/docs/guides/members-roles-2fa).
3. Add monitors for CPU, memory, disk and 5xx rate. See [Monitors and alerts](https://5050cloud.com/docs/guides/monitors).

## Resilience

1. Read the [Honest limits](https://5050cloud.com/docs/reference/honest-limits).
2. With a second host, join it with `--roles app,ingress` and put both IPs behind DNS failover or a load balancer. See [Add a host](https://5050cloud.com/docs/guides/add-a-host).
3. Practise [rebuilding the control host](https://5050cloud.com/docs/guides/rebuild-control-host) once on a spare VM.