.. SPDX-FileCopyrightText: 2023 Gerald Wiese
..
.. SPDX-License-Identifier: GPL-3.0-or-later

Production
==========

This chapter contains two examples to build on and some general hints for productive use.
While the examples can be used as a base they obviously don't obsolete a specific analysis and implementation of individual needs.

Furthermore the deployment of a community server and a test server is documented as well.
Those are not used in an applied medical context but still in productive use.

Some advices apply for both examples:

- Use strong, randomly generated passwords - e.g. 20 partly special characters. Check the password manager KeePassXC if you don't know how.

- Do not use a password more than one time. This does not only reduce the risk of losing a global password but also avoids confusing different servers.

- Deactivate password based SSH and use keys instead.

- Avoid home folders on servers for administration tasks: If one admin leaves, another one should still have e.g. the Ansible directory

- When using Incus - no matter if for testing or production - use `networks <https://linuxcontainers.org/incus/docs/main/networks/>`_ &
  `projects <https://linuxcontainers.org/incus/docs/main/projects/>`_ to separate different areas of work.
  Note that profiles are also target of configuration options inside projects.

.. toctree::
   :maxdepth: 2
   :caption: Contents:

   small
   extended
   community_server
   test_server