Deployment and Operations

Deployment and Operations

1. HTTPS on (.htaccess redirects and HSTS). Use Cloudflare or a WAF for DDoS protection.
2. .env: COMMERZA_MAIL_DRIVER=smtp, COMMERZA_CAPTCHA_BYPASS_LOCAL=0, COMMERZA_OAUTH_STRICT_SSL=1, a strong COMMERZA_ADMIN_RESET_KEY.
3. Register OAuth redirect URIs and the reCAPTCHA domain.
4. Apache: AllowOverride All and TraceEnable Off (see docker/apache-security.conf).
5. Regenerate sitemap.xml after catalog changes.

Docker image: every v* tag publishes ghcr.io/ahmershahdev/commerza:<tag>. Configure it with the COMMERZA_* variables shown in docker-compose.yml.

0 */3 * * * php /var/www/html/backend/jobs/send_engagement_reminders.php 180
0 8 * * 1   php /var/www/html/backend/jobs/weekly_analytics_report.php
0 8 1 * *   php /var/www/html/backend/jobs/monthly_profit_report.php

Symptom	Fix
"Service unavailable."	Check COMMERZA_DB_*. The cause is in the PHP error log
Clean URLs 404	Enable mod_rewrite and AllowOverride All
No emails	Use COMMERZA_MAIL_DRIVER=log locally and look in storage/mail/
Admin locked out	php scripts/dev/reset_admin_password.php <email> <password>