Operational best practices
Habits for safer deploys: staging first, narrow changes, secrets hygiene, backups, and observability.
Written By Zoro
Last updated 3 days ago
These habits complement the task guides in this section.
They reflect how teams use Applications, Environments, and Services without surprising production users.
Use environments deliberately
- Keep production isolated from experiments. Ship risky changes to a staging (or similarly named) Environment first.
- Mirror Variables keys across Environments, but never reuse production secret values in non-production.
Change one thing at a time
- When debugging, separate code changes (Git Redeploy) from variable updates and Scaling edits so you know which action fixed or caused an issue.
- Prefer Redeploy with Use existing cache only when you are confident the image already matches the commit you intend to run.
Protect secrets
- Store sensitive values with
secret()or your vault workflow; avoid logging them in Logs. - Rotate credentials if they leak, then Redeploy every Service that consumed the old values.
Observe before and after
- Watch Deployments logs during rollout, then Logs for steady-state errors.
- After Domains or Proxy edits, verify TLS in a browser and with
curlfrom outside your laptop network if possible.
Back up data, not just code
- Git already versions application source. Database Services still need Backups and tested restores.
- Document who may trigger Restore; it is a high-risk operation.
Plan for rollback paths
- Keep known-good Git tags or Docker tags you can redeploy quickly.
- For data-affecting migrations, ship backward-compatible steps or pair schema changes with restore drills.