# Production checklist
- Use PostgreSQL/MySQL instead of SQLite
- Set a strong AUTH_SECRET
- Add Stripe live keys + webhook
- Connect real hotel/attraction supplier API
- Add transactional email
- Add password reset/email verification
- Add admin/refund tools
- Add Terms, Privacy, Cookies and Cancellation policies
- Add analytics + consent
- Add logging, backups, rate limiting and uptime monitoring
- Test mobile, checkout, supplier failures and accessibility