Could someone specify what is left for production use?

I guess beside fixing the self-signed cert, (with nginx setup) are there any other concerns?