LaravelVueJs
Log a failure without the password
Log the user id and the failure. Do not log the request body, the token, or the password.
LaravelVueJs
Commit .env.example, not .env
.env.example lists the keys with empty secrets. .env stays off the git remote. Vite only sees VITE_ keys.
LaravelVueJs
config:cache makes env() return null
After config:cache, read config('app.name'). env() outside config files returns null.
LaravelVueJs
Run migrations in the release, not in a request
php artisan migrate --force belongs in the release step. A Vue button must not be the thing that migrates production.
LaravelVueJs
Point the load balancer at /up
Laravel registers /up. A load balancer can hit it. The Vue app should not use it as a homepage.
LaravelVueJs
Install Telescope for local debugging
Telescope is a dev dependency. The default gate should not let the public open /telescope.
LaravelVueJs
Store sessions in the database
File sessions break when two servers handle the next request. database sessions follow the user.
LaravelVueJs
Keep the Inertia SSR process running
npm run build does not refresh the SSR bundle. Production needs build:ssr and a process that stays up.
LaravelVueJs
Trust proxies so HTTPS sticks
Behind one load balancer, trustProxies(at: '*') makes Laravel see HTTPS. Do not do that on a machine exposed directly.
LaravelVueJs
Format PHP with Pint before you commit
vendor/bin/pint --dirty formats the PHP you touched. It does not format Vue.
LaravelVueJs
Register routes in bootstrap/app.php
Laravel 11 and newer register routes, middleware, and the health URL in bootstrap/app.php. Do not add Http/Kernel.php back.
LaravelVueJs
Queue a broadcast instead of blocking the save
ShouldBroadcast queues the event. ShouldBroadcastNow runs it inside the request. The Vue listener is the Reverb guide.
Newsletter
Get the best of Laravel & Vue, once a month.
One short email with new guides, release notes worth reading and hand-picked community links. No spam, unsubscribe any time.