In this article I'll explain to you what to do and what to be aware of, when you want to user Fediz IDP in production.
Basically you need to change all default passwords and certificates.
If you will use Tomcat as user Servlet container I'll also give you some tips how to secure tomcat best, so that an attacker will have a hard time breaking into your system.