<@U04UQ68083H> What is the recommended strategy fo...
# ory-copilot
b
@chilly-king-10285 What is the recommended strategy for moving into production? Should I download my entire config, make any changes, the reapply using the Ory CLI?
c
A message from kapa.ai
When moving into production with Ory, there are several steps and considerations to keep in mind: 1. Database: Ory Keto and Ory Kratos require a production-grade database such as PostgreSQL, MySQL, or CockroachDB. SQLite should not be used in production ([source](https://www.ory.sh/docs/keto/guides/production), [source](https://www.ory.sh/docs/kratos/guides/production)). 2. Security: For Ory Kratos, it's paramount to omit the
--dev
flag from
kratos serve
when preparing for production ([source](https://www.ory.sh/docs/kratos/guides/production)). 3. API Gateway: It's recommended to run Ory Keto and Ory Kratos behind an API gateway or a load balancer for security reasons. The Admin API should not be exposed to the public internet unsecured ([source](https://www.ory.sh/docs/keto/guides/production), [source](https://www.ory.sh/docs/kratos/guides/production)). 4. Scaling: There are no additional requirements for scaling when self-hosting Ory Keto or Ory Kratos, just spin up another container ([source](https://www.ory.sh/docs/keto/guides/production), [source](https://www.ory.sh/docs/kratos/guides/production)). 5. Ory CLI: The Ory CLI provides a convenient way to configure and manage projects. It also contains Ory Proxy - a reverse proxy that rewrites cookies to match the domain your application is currently on. This is necessary to avoid issues with the browser CORS policy ([source](https://www.ory.sh/docs/getting-started/integrate-auth/go#install-ory-cli)). 6. Ory Proxy: You can use Ory Proxy in a production setup when self-hosting Ory components. Set the entry point URL to the domain where you want to expose the app through the Ory Proxy ([source](https://www.ory.sh/docs/guides/cli/proxy-and-tunnel#use-ory-proxy-when-self-hosting)). As for your specific question about downloading your entire config, making changes, and then reapplying using the Ory CLI, the provided extracts do not contain specific information on this process. However, it's generally a good practice to review and adjust your configuration settings when moving from a development to a production environment. For more detailed instructions, you may want to refer to the official Ory documentation or seek advice from the Ory community.
b
@chilly-king-10285 OK, but what's the actual process of moving into production?
c
A message from kapa.ai
New message text here