Deployment

Production build workflow

npm install
cd engine && composer install --no-dev --optimize-autoloader && cd ..
npm run build

Pre-release checks

• developer mode disabled
• production assets present and loading
• .htaccess protections in sensitive directories
• template parameters finalized (logo, metadata, scripts)
• cache and gzip strategy confirmed on server

Security hardening

• enforce HTTPS
• verify security headers
• remove development-only files/log residue from package
• keep directory/file permissions restricted (755 dirs, 644 files)

Post-deploy verification

1. Visual smoke test on key pages
2. Validate CSS/JS HTTP 200 responses
3. Confirm no PHP/template log errors
4. Run accessibility and performance quick checks

Rollback readiness

• keep previous template package available
• keep database/filesystem backup before major updates