What Are the Most Effective Odoo Security Practices for Production?

[Vihan Richard]

Hi everyone,

As we prepare to deploy Odoo in production, I'm looking for advice on essential Odoo security configurations. So far, I’ve enabled HTTPS, limited database access to localhost, and disabled debug mode. Are there other critical steps I should consider?
How do you handle user permissions, firewall rules, and audit logging?
Would appreciate insights from those who’ve deployed Odoo securely in high-risk or enterprise environments.

Security is a top priority—thanks in advance!