Change
JWT_SECRET from the default valueDo not expose the local
docker-compose.local.yml ports directly to the internetSet
MONGO_URI to a production MongoDB with auth enabledSet
FRONTEND_URL to your actual frontend domain (prevents CORS issues)Build the frontend with
REACT_APP_API_URL=https://api.yourdomain.comEnable TLS on both frontend and backend ingress
Set up MongoDB backups
Set up PostgreSQL backups if PostgreSQL is configured
Configure
AGENT_SESSION_MAX_SIZE_KB (default 400KB is fine)Test agent runtime token auth end-to-end
Seed initial admin user and at least one pod

