production-web-app-checklist

Table of Contents

• Docker
• Nginx
• PostgreSQL

Docker

• [ ] Run Docker security benchmark
• [ ] Use a specific version for each image e.g. node:9.3.0
• [ ] If using Node, use best practices: https://github.com/nodejs/docker-node/blob/master/docs/BestPractices.md

Nginx

• [ ] https and http/2

PostgreSQL

• [ ] Make sure cascade deletes work correctly