This commit is contained in:
Mark Gregory
2026-09-12 20:22:45 +01:00
parent 35d3f344c8
commit 0704924aa8
3 changed files with 2 additions and 30 deletions
-16
View File
@@ -1,16 +0,0 @@
# Production implementation map
## Included foundation
Public marketplace UI, responsive DJ search/profile, enquiry flow, role-ready user/business models, bookings/reviews schema, admin dashboard shell, API route, consent UI, legal placeholders, Stripe/Cashier dependencies, Redis-ready environment, generated design reference.
## Next production modules
1. Install Laravel 13 framework/vendor files with Composer.
2. Add Laravel starter auth (Fortify/Livewire) and verified email + 2FA.
3. Publish/configure Spatie Permission and Media Library migrations.
4. Add Business/DJ CRUD with policies, moderation and private verification documents.
5. Add quotes, quote items, availability, booking state machine, conversations/messages.
6. Add Cashier + Stripe Connect onboarding, deposits, refunds, payouts and webhook idempotency.
7. Add database/email/push notification preferences and queued notifications.
8. Add support ticketing, reports, audit viewer, privacy export/delete workflow.
9. Add full feature/policy/payment tests and browser accessibility tests.
10. Replace demo remote imagery with generated/owned image set and wire image derivatives/CDN.
-12
View File
@@ -1,12 +0,0 @@
# Security baseline
- Enforce HTTPS/HSTS in production.
- Keep private/verification uploads outside public storage; authorize every download.
- Validate MIME and image decoding; strip metadata where appropriate.
- Use policies for every tenant-owned resource.
- Enable 2FA for admin/DJ accounts.
- Verify Stripe webhook signatures and make handlers idempotent.
- Rate-limit auth, enquiry, review and messaging endpoints.
- Audit privileged actions; hash IP addresses if retained.
- Never store card details.
- Run queues under Supervisor/systemd and keep dependencies patched.
- Replace placeholder legal policies before launch.
+2 -2
View File
@@ -22,13 +22,13 @@ host('main')
->set('hostname', '217.154.47.197')
->set('remote_user', 'mag')
->set('branch', 'main')
->set('deploy_path', '/var/www/rsyncstudio');
->set('deploy_path', '/var/www/beatbook');
host('stage')
->set('hostname', 'pegasus.absdev.net')
->set('remote_user', 'mag')
->set('branch', 'stage')
->set('deploy_path', '/var/www/rsyncstudio');
->set('deploy_path', '/var/www/beatbook');
task('build', function (): void {
run('export NVM_DIR="$HOME/.nvm" && [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" && nvm use {{node_version}} && cd {{release_path}} && npm ci --no-audit --no-fund');