# UI Bakery in production

UI Bakery installation is ready for production out of the box. However, there is a bunch of additional setup steps we recommend following:

* Put your instance behind HTTPS.
* Use a standalone database.
* Enable automatic backups for instance and database machines.
* Lock the UI Bakery version by setting a specific value for the **UI\_BAKERY\_VERSION** environment variable.
* Store your environment variables in a secure place like a secrets manager or a key vault. Make sure you override the following variables:

```
UI_BAKERY_JWT_SECRET
UI_BAKERY_JWT_REFRESH_SECRET
UI_BAKERY_JWT_SERVICE_ACCOUNT_SECRET
UI_BAKERY_CREDENTIALS_SECRET
UI_BAKERY_MFA_SECRET
```

If you have used the install script, then your .env file already contains unique values for those vars. Otherwise, use [the following guide to generate the secrets](https://docs.uibakery.io/on-premise/install-and-update/recommendations/generate-custom-secrets).