Studying self-hosted solutions

Last modified on

Workspace

XTiles, with custom embed
All-in-one workspace for your creative journey • xTiles

Knowledgebase

Outline – Team knowledge base & wiki (getoutline.com)

Single Sign-On

https://www.authelia.com/

Some trouble using along with Cloudflare Tunnel
ZITADEL • Identity infrastructure, simplified for you

teamhanko/hanko: Customer Identity and Access Management for the passkey era (github.com)
Supports passkey

 

Essential plugins and settings for new WordPress sites

Plugins

  1. NinjaFirewall
    • Enable Full WAF mode
  2. Cloudflare
    • Connect using Cloudflare API token
  3. Child Theme Configurator
    • Deactivate once you have created the child theme

Cloudflare settings

  1. Page rule
    • Restrict access to wp-login*
      • whitelist your home country
      • whitelist IP address
  2. (advanced) Cloudflare Zero Trust
    • Access
      • Restrict access to wp-login.php
        • Requires email code
        • Requires specific email addresses
  3. (advanced) Security > WAF
    • Rate limiting rules
      • wp-login*
        • Limit the time
          e.g. 2 requests in 10 seconds

Housekeeping

  1. Delete built-in plugins
    • Hello Dolly
    • Akismet
  2. Settings > Discussion
    • Before a comment appears
      • Comment must be manually approved
 

HestiaCP and Cloudflare SSL

For the setup of HestiaCP and Cloudflare SSL (orange cloud) with Full non-strict setting.

  1. HestiaCP
  2. Add web domain
  3. Fill in domain, left other options unchecked
  4. Go to Cloudflare and add A record
  5. Edit domain
  6. Select enable SSL for this domain
  7. Generate Self-signed SSL certificate
  8. Paste SSL cert and private key