# Deployment Notes

## Requirements

- PHP with PDO MySQL support.
- MySQL or MariaDB.
- Web server with a document root pointing to `public/`.

## Setup

1. Import `sql/schema.sql`.
2. Update `app/config.php`.
3. Set the web server document root to `public/`.
4. Create the default groups and applications.
5. Test registration, login, and access control.

## Production Checklist

- Force HTTPS.
- Set secure session cookie flags.
- Turn off display errors.
- Log errors to file.
- Confirm file permissions are restricted.
- Back up the database before changes.

## Maintenance

- Review logs regularly.
- Rotate credentials when needed.
- Revisit password policy periodically.
- Update dependencies and platform packages.
- Re-test admin workflows after schema changes.