# Cookbook

> Practical recipes for deploying and operating Yii applications.

Each recipe addresses a concrete task and states its assumptions, configuration, and verification steps. Adapt the
examples to the application and environment before applying them.

## Deployment and operations

- [Hardening a PHP VPS with Tailscale + Cloudflare](/docs/cookbook/hardening-vps/index.md) covers private administration, restricted origin
  access, certificates, and trusted proxy settings.
- [Configuring PHP for production](/docs/cookbook/php-production/index.md) covers current security precautions, private errors, sessions,
  limits, and verification of the PHP runtime serving your application.

For application-level protections, read the [security best practices](/docs/guide/security-best-practices/index.md).