# Deployment — cPanel

Recommended document root:
`/home/<account>/ststender.summittechnicalsolutions.com/public`

Application root:
`/home/<account>/ststender.summittechnicalsolutions.com`

Commands after upload:

```bash
cd /home/<account>/ststender.summittechnicalsolutions.com
cp .env.example .env
# edit .env with production database and SSO settings
php bin.php migrate
php tests/static.php
```

Do not enable `STS_DEV_LOGIN` in production.

## Basecamp SSO
Tender supports a signed callback at:
`https://ststender.summittechnicalsolutions.com/?route=sso`

Expected query values:
- `payload`: base64 JSON containing `name`, `email`, `role`
- `sig`: HMAC-SHA256 of the raw base64 payload using `BASECAMP_SHARED_SECRET`

The actual Basecamp launcher/callback format should be adapted to the same convention used by the other STS applications before go-live.

## SharePoint
Set `SHAREPOINT_TENDER_ROOT` to the authoritative tender document location. This MVP stores SharePoint URLs, not duplicate document binaries.