Self-Hosted E-commerce Topic Guide
Updated 2026-06-29 · 10 min read · By Ben Liu
Before taking real payments: PSP scope, TLS, receipts, and abuse controls.
Money changes the stakes
Prefer hosted payment fields. Make webhooks idempotent. Rate-limit checkout. Practice maintenance mode and restores.
Compliance and operations
You are responsible for receipts, tax exports, and customer data retention even when the software is free. Align with your accountant before go-live.
Separate staging from production payment credentials. Never reuse live keys on experiments.
Abuse and support load
Expect card testing, fake orders, and chargebacks. Logging, CAPTCHA options, and a clear refund path matter as much as themes.
Related deep-dive guides
- Reverse Proxy and Automatic TLS for Homelabs
One ops guide for reverse proxy + ACME: what a proxy solves, Caddy/Traefik/Nginx fit, certificate renewal, Docker wiring, failure modes, and troubleshooting — without three overlapping primers.
- Reverse Proxy and Automatic TLS for Homelabs
One ops guide for reverse proxy + ACME: what a proxy solves, Caddy/Traefik/Nginx fit, certificate renewal, Docker wiring, failure modes, and troubleshooting — without three overlapping primers.
- The Reality of Self-Hosting Email in 2026
Why inbound/outbound mail is a reputation business: SPF/DKIM/DMARC, dirty IPs, hybrid patterns, and when not to self-host MTA.