WordPress Landing on a VPS — Web Architecture Diagram

WordPress Landing on a VPS — Web Architecture Diagram An architecture diagram generated by Archify. Visitors · Browser · Architecture component Visitors Browser Client Editor · wp-admin · Architecture component Client Editor wp-admin Admin · SSH key-only · Architecture component Admin SSH key-only Let's Encrypt · TLS certificates · Architecture component Let's Encrypt TLS certificates Traefik · Reverse Proxy :443 · DigitalOcean Droplet · Docker Compose › UFW: 22 / 80 / 443 · HTTP → HTTPS Traefik Reverse Proxy :443 HTTP → HTTPS WordPress · container · DigitalOcean Droplet · Docker Compose · WordPress WordPress container MySQL · container + volume · DigitalOcean Droplet · Docker Compose · MySQL MySQL container + volume fail2ban + sshd · no root login · DigitalOcean Droplet · Docker Compose › UFW: 22 / 80 / 443 fail2ban + sshd no root login Cron Backups · dump + wp-content · DigitalOcean Droplet · Docker Compose Cron Backups dump + wp-content HTTPS HTTPS ACME renew SQL SSH mysqldump DigitalOcean Droplet · Docker Compose UFW: 22 / 80 / 443 Legend Backend Database Cloud Security External

Edge

  • • Traefik terminates TLS and redirects HTTP to HTTPS
  • • Let's Encrypt certificates renewed automatically

Application

  • • WordPress and MySQL containers with persistent volumes
  • • MySQL reachable only on the internal Docker network
  • • Client manages content from wp-admin

Host security

  • • Key-only SSH, root login disabled
  • • fail2ban and WordPress login-attempt limit
  • • Scheduled backups: MySQL dump + wp-content