# Security Checklist for new site

**URL:** <https://forum.mautic.org/t/security-checklist-for-new-site/14163>\
**Category:** General Discussion\
**Created:** [May 4, 2020, 6:45am UTC](https://forum.mautic.org/t/security-checklist-for-new-site/14163 "2020-05-04T06:45:31Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![burgers](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/burgers/32/1001_2.png) [@burgers](https://forum.mautic.org/u/burgers)\
**Post date:** [May 4, 2020, 6:45am UTC](https://forum.mautic.org/t/security-checklist-for-new-site/14163/1 "2020-05-04T06:45:31Z")

</div>

Hi, first post here. I set up Mautic on DO using wget + unzip. It seems to be working well.

My question is about whether there are any guides or checklists to secure my setup? I noticed in the configuration that the default spool, log, etc directories are under web root so viewable online unless I move them.

This is easily done - I just want to ensure I don’t miss anything important. If it’s just the stuff under the configuration screen, then that shouldn’t be a problem.