SW Secure Deploy

Security configs and deployment tips for a secure Shopware 6 setup.

Links

Usage

All codes should be inserted right at the beginning of the files.

Add code from .htaccess to your .htaccess file.
Add code from robots.txt to your robots.txt file.

Recommendations

Update Shopware and apps/themes
Install/Update the Shopware Security Plugin
Enable Two Factor Authentication
Verify production mode is enabled
Verify backups are working
Verify Shop Status (FroshTools)

Advanced

Use a creative admin user name
Setup stricter rate limits (shopware.yml)
Install extensions as composer packages