Running it in productionintermediate
A healthcheck is how the platform knows to restart your container, and running as a non-root user is how a bug stops being a breach.
Serve the build correctly — cache the hashed assets forever, never cache index.html — and add the CI check that stops the bundle growing quietly.
A repeat visit refetches nothing but index.html, and a bundle 40KB over budget turns the pull request red.
Published in full, before you start — every point is one of these and there is nothing else.
A healthcheck is how the platform knows to restart your container, and running as a non-root user is how a bug stops being a breach.
A pipeline that builds and tests every push is how you find out you broke something in three minutes instead of three weeks.