A sophisticated multi-tenant SaaS boilerplate that lets you go from idea to paying customers in weeks instead of months. The application handles tenant provisioning (single-DB and DB-per-tenant strategies supported), custom subdomains, custom domains with automatic SSL via Let's Encrypt, Stripe subscription billing with metered usage, Stripe Tax for automatic VAT/GST, dunning management for failed payments, and a full customer portal.
Authentication supports email/password, magic links, two-factor authentication via TOTP and WebAuthn, Google/GitHub/Microsoft SSO, and SAML 2.0 for enterprise plans. Team management includes role-based permissions, invitation flows, audit logs, and impersonation for support staff.
The front-end is built with Next.js 14, the API with Laravel 11, and real-time features via Pusher or self-hosted Soketi. A comprehensive admin dashboard gives you MRR charts, churn analysis, trial conversion funnels, and per-tenant usage metrics. All source code is commented, typed, and tested — saving you months of foundational work.
Tenancy Features:
• Single-database (row-scoped) and database-per-tenant strategies
• Dynamic subdomain routing with wildcard SSL
• Custom domain support with automated Let's Encrypt certificates
• Tenant-level branding: logo, colors, favicon, custom emails
• Per-tenant feature flags and quotas
• Cross-tenant reporting for superadmins
• Impersonation with full audit trail
• Scheduled tenant backups with point-in-time recovery
Billing & Subscriptions:
• Stripe Billing with metered usage, tiered pricing, seat-based plans
• Free trials with or without credit card
• Annual/monthly switching with prorated charges
• Stripe Tax for automatic VAT/GST/Sales Tax
• Dunning management for failed payments (3 retry attempts, email cadence)
• Customer portal for plan upgrades and invoice downloads
• Webhook handlers for all Stripe events
• Paddle and Lemon Squeezy as alternative backends
Authentication & Security:
• Email/password with bcrypt hashing and rate limiting
• Magic link sign-in
• TOTP 2FA (Google Authenticator, Authy, 1Password)
• WebAuthn/passkeys (FIDO2)
• Social login: Google, GitHub, Microsoft, LinkedIn, Apple
• SAML 2.0 SSO for enterprise plans (Okta, Azure AD, JumpCloud, OneLogin)
• SCIM 2.0 user provisioning
• IP allowlisting per tenant
• Forced password rotation policies
• Session management with revocation
Developer Experience:
• OpenAPI 3.1 spec with auto-generated clients (TypeScript, Python, Ruby, Go)
• Postman collection with example requests
• CLI tool for tenant management
• Webhook testing playground
• Comprehensive test suite (Pest for PHP, Vitest for JS)
• CI/CD templates for GitHub Actions, GitLab CI, CircleCI
Stack: Laravel 11 + Next.js 14 + PostgreSQL 16 + Redis 7 + Meilisearch. All code typed, linted, and Docker-ready.