Skip to content

P0-4 · Domain-restrict Google Maps key + billing alerts #331

Description

@mcull

Phase 0 launch blocker · P0-4 · Marc-action (INFRA-002)

NEXT_PUBLIC_GOOGLE_MAPS_API_KEY is exposed client-side.

Actions

  • Set HTTP-referrer restrictions to the production domain.
  • Configure billing alerts before public traffic.

Verified TRUE against code on 2026-06-09. See docs/TRACKER_PLAN.md.

Sequence: secrets/keys first (with P0-1, P0-9).

Metadata

Metadata

Assignees

No one assigned

    Labels

    P0Launch blocker — must ship before any marketing trafficsecuritySecurity issuews:infraInfrastructure, security, deploy, observability

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions