frappe-ops-deployment

What problem does it solve?

Deploying Frappe/ERPNext to production often results in insecure configurations, misconfigured reverse proxies, and fragile process management. This Skill provides a comprehensive blueprint that coordinates Nginx, Supervisor, Docker, SSL, and firewall hardening to ensure reliable and secure go-lives.

Core Features & Use Cases

• Traditional production setup: bench + Nginx + Supervisor, with proper sudoers and DNS multitenancy.
• Docker-based deployment with frappe_docker and Compose for scalable, portable environments.
• Security hardening: firewall rules, Fail2Ban, Redis authentication, and TLS/SSL management via Let's Encrypt or custom certs.
• Zero-downtime updates and robust upgrade workflows across both traditional and Docker deployments.
• SSL management and domain handling: automatic TLS via Let's Encrypt and support for DNS multitenancy.

Quick Start

Initialize a production deployment by provisioning a server, installing bench, creating a site, configuring Nginx and Supervisor, and enabling SSL with Let's Encrypt.