Cookbook

Each recipe addresses a concrete task and states its assumptions, configuration, and verification steps. Adapt the examples to the application and environment before applying them.

Deployment and operations

• Hardening a PHP VPS with Tailscale + Cloudflare covers private administration, restricted origin access, certificates, and trusted proxy settings.
• Configuring PHP for production covers current security precautions, private errors, sessions, limits, and verification of the PHP runtime serving your application.

For application-level protections, read the security best practices.