Patrick Plate
1e693e3d2a
- docs/sprint-6/launch-checklist.md: comprehensive pre/post-launch checklist - /pricing: public pricing page (Starter €19, Pro €49, Enterprise) - /impressum, /datenschutz, /agb: legal page templates (placeholder text) - (marketing) route group: public layout without auth - Footer links to legal pages on login + portal - i18n for marketing namespace (de + en) - Fix pre-existing lint errors (unused vars, missing @stomp/stompjs types)
62 lines
2.2 KiB
Markdown
62 lines
2.2 KiB
Markdown
# CannaManage — Launch Checklist
|
|
|
|
## Pre-Launch (before going live)
|
|
|
|
### Infrastructure
|
|
- [ ] IONOS VPS SSH access configured
|
|
- [ ] Docker + Docker Compose installed on VPS
|
|
- [ ] Nginx installed + cannamanage.conf symlinked
|
|
- [ ] Let's Encrypt TLS certificate for cannamanage.plate-software.de
|
|
- [ ] .env production secrets generated (JWT, NextAuth, DB passwords)
|
|
- [ ] GPG backup key generated
|
|
- [ ] Cron job for daily backup configured
|
|
- [ ] Gitea Actions secrets configured (SSH_USER, SSH_PRIVATE_KEY)
|
|
- [ ] DNS A record: cannamanage.plate-software.de → VPS IP
|
|
|
|
### Stripe
|
|
- [ ] Stripe account created + verified
|
|
- [ ] Products created: Starter (€19/mo), Pro (€49/mo)
|
|
- [ ] SEPA + PayPal + Card payment methods enabled
|
|
- [ ] Webhook endpoint registered: https://cannamanage.plate-software.de/api/v1/webhooks/stripe
|
|
- [ ] Test payment successful (SEPA + Card)
|
|
- [ ] AVV (Auftragsverarbeitungsvertrag) signed with Stripe
|
|
|
|
### Legal
|
|
- [ ] Impressum page created
|
|
- [ ] Datenschutzerklärung (privacy policy) published
|
|
- [ ] AGB (Terms of Service) published
|
|
- [ ] DSGVO consent text reviewed by lawyer (recommended)
|
|
- [ ] Cookie banner (if analytics added later)
|
|
|
|
### Security
|
|
- [ ] Final Snyk scan — no critical/high findings
|
|
- [ ] HTTPS enforced (HTTP → 301 redirect)
|
|
- [ ] CSP headers active
|
|
- [ ] HSTS enabled
|
|
- [ ] Rate limiting configured (Nginx)
|
|
- [ ] DB backup tested (restore drill)
|
|
- [ ] REVOKE DELETE on audit_events applied in production
|
|
|
|
### Application
|
|
- [ ] docker compose -f docker-compose.prod.yml up -d — all services healthy
|
|
- [ ] Flyway migrations V1-V10 applied successfully
|
|
- [ ] Admin user created (first club onboarding)
|
|
- [ ] Test distribution flow end-to-end
|
|
- [ ] PDF report generation works
|
|
- [ ] Email sending works (SMTP configured)
|
|
- [ ] WebSocket notifications connect
|
|
|
|
### Monitoring
|
|
- [ ] Health check endpoint accessible: /health
|
|
- [ ] Uptime monitor configured (UptimeRobot, Hetrix, or cron)
|
|
- [ ] Error alerting (email on 5xx errors)
|
|
- [ ] Log rotation verified
|
|
|
|
## Post-Launch (first week)
|
|
|
|
- [ ] First real club onboarded
|
|
- [ ] First distribution recorded
|
|
- [ ] Backup restore drill (within first 3 days)
|
|
- [ ] Performance baseline established (response times)
|
|
- [ ] Stripe live mode activated (after test verification)
|