# Files setup

Download the product archive from your Envato downloads.

1. Download the product archive from your Envato downloads.
2. Upload the archive to the directory that will contain the application and extract it on the server. Extracting server-side helps prevent hidden files from being skipped.
3. Copy the contents of the package's `Script` directory into the application directory.
4. Confirm that hidden files such as `.env` and `.htaccess` are present.
5. Allow the web server user to write to `storage/` and `bootstrap/cache/`. Do not make the entire application publicly writable.

## Document root

Configure the domain's document root to point to the package's `public/` directory. For example, if the application lives in `/var/www/justflows`, the public document root is `/var/www/justflows/public`.

This keeps `.env`, application code, logs, and stored secrets outside the public web directory. If `/public` appears in your site URL, the document root is not configured correctly.

<Info>
A package-level fallback file may help on restricted hosting, but configuring the real document root is the production-safe solution.
</Info>

## Web server notes

- **Apache/LiteSpeed:** allow the included `.htaccess` rules and enable URL rewriting.
- **Nginx:** route requests through `public/index.php` using a standard Laravel virtual host.
- **Reverse proxies:** forward the original host, scheme, and client IP headers, and ensure the application recognizes HTTPS.