> The list of crap to consider when deploying code is disgusting
This is why we get paid enough that we can retire in a mere decade.
> Do you ship a single binary or do you copy a boat load of language files over?
Rust or Go? Single binary. But you should ship containers regardless of language and just not care.
> Do you use your languages special packaging tool or do you use something like rpm?
DO NOT USE THE HOST PACKAGE MANAGER. Version and lock your dependencies. Vendor them. Don't get tangled up in the OS. That'll double the trouble. Then build and ship containers. Don't ever run bare metal unless you want to be tied to it as a design contract.
> How do you handle dependency conflicts?
A monorepo helps tremendously. You seldom deal with dependency issues, and every bump is handled by one person once in most cases. But people tend to hate these for some reason. I happen to think they work even for small orgs.
> Where on the box do you store your files?
Firstly, use containers. But as for where to place them, the homedir or /data is perfect. But it doesn't really matter that much if you make a single choice and stick with it across your apps.
> What should the default config look like?
Like development.
> How do I populate my prod config?
prod = development, but overrides for the prod topology. Perhaps this varies wildly for apps that use many sharded databases. This is the nature of our work.
> What about app install scripts?
Docker / K8S. Don't bake them into the runtime lifecycle if possible.
> Do I use puppet or ansible to manage packages and configs?
Version control your config. You won't have secrets in them.
> How do I know if my application stops running?
Metrics + PagerDuty
> What if it hangs?
Metrics + PagerDuty
> Should I put my app behind nginx or apache?
Rust or Go won't need this. Swift might work too. Ruby and Python, maybe. Sounds like a lot of work. You can launch it as a sidecar or DaemonSet, perhaps. I shy away from scripting languages that need to be load balanced. You're stretching a solution beyond its limits, and there are modern languages and platforms that won't need this.
> How do I configure my firewall?
Envoy, Calico. Default policies to DENY all except what you carve out.
> What about backups?
For your databases, file uploads, and last few weeks of production builds.
> Is your SSL cert up to date?
Monitoring and paging helps here too.