Popular posts

There's no right answer to this and really depends on the scale at which you are going to operate. Few general pointers you could follow:

• Running multiple instances of the app (which would require a load-balancer and possibly a reverse-proxy)
• Hardening security (check top 10 OWASP vulnerabilities)
• Using gzip compression for your responses
• Proper logging for Root Cause Analysis of errors (check the ELK stack)
• Using caching servers (like Memcached) for reduced DB calls
• Delegating tasks like session management to in-memory databases (like Redis)

There are a lot of other things I might be missing out here, but this is something that should get you started.

I should also mention that a precursor to all of the above should be setting up solid CICD pipelines and automating everything from building your app to unit-testing, integration testing, code coverage, code quality scans, SAST/DAST scans, deployment, etc.

You should also follow a strict git workflow and protect branches to prevent accidental pushes. Check this guide out.

Hope this helps!