Skip to main content

Backoffice Post-launch Tasks (24–48h)

  • Flip CSP to enforce

    • File: toto-bo/src/app/middleware.ts
    • Replace Content-Security-Policy-Report-Only with Content-Security-Policy
    • Target date: 2025-08-12
    • Verify no console CSP violations before flipping

  • Monitoring & alerts

    • Uptime check on /api/health
    • Error alerts for 5xx spikes

  • Rate limiting follow-up

    • Evaluate persistent/edge rate limiting (Cloud Armor, Redis) if needed