> For the complete documentation index, see [llms.txt](https://documentation.opencrvs.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.opencrvs.org/technical/guides/installation/deploy-set-up-a-server-hosted-environment/3.3.4-set-up-an-smtp-server-for-opencrvs-monitoring-alerts.md). # Pre-Deployment Checklist This pre-deployment checklist can help ensure that each server environment is ready for you to go live:

Step	Explanation
Provisioning & Deployment pipelines for Backup, QA, staging & production working	Your Github Actions should all be running without any errors in logs. No red crosses!
SMTP service tested for emails and alerts	Not only should you confirm that emails are sending for staff, but you should receive emailed alerts too. If you have enabled Slack as the ALERT_EMAIL you would see an SSH login alert in Slack like this:
Setup DNS & TLS (HTTPS)	Your SSL certificate should be valid.
Verify production backups restore on staging (pre-prod/mirror)	Ensure that a backup & restore test is completed as documented.
Alert sent of SSH login	Ensure the SSH login alert is firing as mentioned above in the "SMTP service tested" description.
Verify a warning is received when disk space is at 50%, alert at 70%	To test this you need to create a temporary large file on your server. Kibana will broadcast an alert. This example terminal command creates a file of 200G: `sudo dd if=/dev/zero of=/large-file-to-trigger-alerts bs=200G count=100.`
Optional: Confirm Sentry errors to Slack from QA, Staging and Prod	A test Sentry error in Slack looks something like this:
Are National System Admin passwords updated, minimum 12 chars long and stored in a Password Manager.	The National System Admin must immediately change their password from the password that exists in prod-employees.csv . As they are a super user, they must confirm that the new password is saved in a password manager tool.
Github account is owned by country and only approved users are admins	If users have "Admin" rights in your countryconfig repository they can potentially access citizen data.
Verify firewall hides all ports from the public internet	OpenCRVS should not be accessible on the public internet. But if you decide to do this at your own risk then this command can help you discover open ports: `nmap --open opencrvs.domain.com`
Clear all data from production instances created during testing	Reset the production environment so that it is clear of any test registrations.
Delete all test backups on backup server	SSH into the backup server and delete any test backups. Especially if you have configured the backup server to store more than the default 7 days of backups.
Delete all terminal history on all production, staging and backup servers	You might have exported secrets in Terminal to use when resetting environments or debugging. Clear the terminal history like this: `history -c`
Only approved users should have SSH access to production, staging & backup servers	SSH access must be removed for unnecessary users, otherwise they can still access citizen data. Follow the steps as documented.

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://documentation.opencrvs.org/technical/guides/installation/deploy-set-up-a-server-hosted-environment/3.3.4-set-up-an-smtp-server-for-opencrvs-monitoring-alerts.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.