cfml

If I wanted to think about using CommandBox for production as well as test and dev, what's the recommended way to spin up a locked down ACF server on CommandBox?

<@U0R6WFD7S> Generally speaking
• use the `production` profile
• Use CFConfig to lock down the CF admin settings

Thanks.
Is there a documented or out of the box CFConfig setup to lock down CF Admin?

<https://gist.github.com/bdw429s/104b3bf0bbd9cdb00464308eb5d7385e>

<https://www.ortussolutions.com/blog/using-cfconfig-to-apply-government-stigs-to-coldfusion-servers>

This is awesome!
Don't know why I didn't know about it.
The reporting aspect is especially welcome.

What is the applicationMode setting?
I don't see anything that's obviously that in ACF 2018 or 2021 admin.
The admin search function doesn't find it, and none of the hits on "mode" seem like it.

That's the setting on how CF searches for Applcation.cfc. It's called *Application.cfc/Application.cfm lookup order.*

<@U0R6WFD7S> You can always check the docs in CFConfig's `BaseConfig` class which defines all the possible settings
<https://github.com/Ortus-Solutions/cfconfig/blob/master/models/BaseConfig.cfc#L139-L146>