- Download the product archive from your Envato downloads.
- Upload the archive to the directory that will contain the application and extract it on the server. Extracting server-side helps prevent hidden files from being skipped.
- Copy the contents of the package's
Scriptdirectory into the application directory. - Confirm that hidden files such as
.envand.htaccessare present. - Allow the web server user to write to
storage/andbootstrap/cache/. Do not make the entire application publicly writable.
Document root
Configure the domain's document root to point to the package's public/ directory. For example, if the application lives in /var/www/justflows, the public document root is /var/www/justflows/public.
This keeps .env, application code, logs, and stored secrets outside the public web directory. If /public appears in your site URL, the document root is not configured correctly.
Info
A package-level fallback file may help on restricted hosting, but configuring the real document root is the production-safe solution.
Web server notes
- Apache/LiteSpeed: allow the included
.htaccessrules and enable URL rewriting. - Nginx: route requests through
public/index.phpusing a standard Laravel virtual host. - Reverse proxies: forward the original host, scheme, and client IP headers, and ensure the application recognizes HTTPS.