Where to upload

1. Go to /
2. Create a folder, the folder name is the name of album
3. Upload your photos to the new folder

Plugins

1. NinjaFirewall
   • Enable Full WAF mode
2. Cloudflare
   • Connect using Cloudflare API token
3. Child Theme Configurator
   • Deactivate once you have created the child theme

Cloudflare settings

1. Page rule
   • Restrict access to wp-login*
     • whitelist your home country
     • whitelist IP address
2. (advanced) Cloudflare Zero Trust
   • Access
     • Restrict access to wp-login.php
       • Requires email code
       • Requires specific email addresses
3. (advanced) Security > WAF
   • Rate limiting rules
     • wp-login*
       • Limit the time
         e.g. 2 requests in 10 seconds

Housekeeping

1. Delete built-in plugins
   • Hello Dolly
   • Akismet
2. Settings > Discussion
   • Before a comment appears
     • Comment must be manually approved

For the setup of HestiaCP and Cloudflare SSL (orange cloud) with Full non-strict setting.

1. HestiaCP
2. Add web domain
3. Fill in domain, left other options unchecked
4. Go to Cloudflare and add A record
5. Edit domain
6. Select enable SSL for this domain
7. Generate Self-signed SSL certificate
8. Paste SSL cert and private key