---
url: /site.md
---
# Site behaviour

Features that apply to the whole site rather than to one module or one panel screen.

::: cards

* [SEO and Head](/site/seo-and-head)
  What goes into `<head>`, what editors control, sitemap, `robots.txt`, `security.txt`, structured data.
* [Tracking and Consent](/site/tracking-and-consent)
  The tag manager snippet, Consent Mode, the cookie banner, server-side conversions, and what fires on which environment.
* [Page Cache](/site/page-cache)
  Static HTML for anonymous visitors, served by the web server without booting Laravel.
* [Security Headers](/site/security-headers)
  What the middleware sends and what the web server must add.
* [Health Checks](/site/health-checks)
  The `/evolve/health` dashboard, the Oh Dear endpoint, and the `api/health-check` endpoint that Fleet reads.
* [Error Tracking](/site/error-tracking)
  Sentry tags and releases, so a fleet of sites stays searchable in one project.
  :::

## At a glance

| Feature | Default | Main switch |
|---|---|---|
| SEO and Head | always on; staging and development carry `noindex, nofollow` | the SEO fields on each page |
| Tracking and Consent | emits on live only | `TRACKING_EMIT` overrides the environment type |
| Page Cache | off | `APP_PAGE_CACHE=true` or the Settings screen, plus the `.htaccess` rules |
| Security Headers | on since 2.12 | `EVOLVE_SECURITY_HEADERS=false` switches the middleware off |
| Health Checks | dashboard always on | `OH_DEAR_HEALTH_CHECK_SECRET` opens the Oh Dear endpoint |
| Error Tracking | off | `SENTRY_LARAVEL_DSN`, with `sentry/sentry-laravel` installed |