🚀 WordPress pe VPS - Optimizare pentru trafic mare

# Actualizează sistemul
sudo apt update && sudo apt upgrade -y

# Instalează Nginx
sudo apt install nginx -y

# Instalează PHP 8.3 și extensii
sudo apt install php8.3-fpm php8.3-mysql php8.3-curl php8.3-xml php8.3-mbstring php8.3-zip php8.3-gd php8.3-intl php8.3-opcache -y

# Instalează MariaDB
sudo apt install mariadb-server mariadb-client -y

# Securează MySQL
sudo mysql_secure_installation

# /etc/nginx/sites-available/wordpress
server {
    listen 80;
    listen [::]:80;
    server_name domeniu.ro www.domeniu.ro;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name domeniu.ro www.domeniu.ro;

    # SSL (obține cu Certbot)
    ssl_certificate /etc/letsencrypt/live/domeniu.ro/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/domeniu.ro/privkey.pem;

    root /var/www/wordpress;
    index index.php;

    # Gzip compresie
    gzip on;
    gzip_comp_level 6;
    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

    # Browser caching
    location ~* \.(jpg|jpeg|png|gif|ico|css|js|svg|woff|woff2)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
    }

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.3-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
    }

    location ~ /\.ht {
        deny all;
    }
}

# Descarcă WordPress
cd /tmp
wget https://wordpress.org/latest.tar.gz
tar xzf latest.tar.gz
sudo mv wordpress /var/www/

# Setează permisiuni
sudo chown -R www-data:www-data /var/www/wordpress
sudo chmod -R 755 /var/www/wordpress

# Crează baza de date
sudo mysql -u root -p
CREATE DATABASE wordpress_db;
CREATE USER 'wpuser'@'localhost' IDENTIFIED BY 'parola_securizata';
GRANT ALL PRIVILEGES ON wordpress_db.* TO 'wpuser'@'localhost';
FLUSH PRIVILEGES;
EXIT;

# Configurează wp-config.php
cd /var/www/wordpress
sudo cp wp-config-sample.php wp-config.php
sudo nano wp-config.php

# Activează SSL (Certbot)
sudo apt install certbot python3-certbot-nginx -y
sudo certbot --nginx -d domeniu.ro -d www.domeniu.ro

# /etc/php/8.3/fpm/pool.d/www.conf
pm = dynamic
pm.max_children = 20
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 20

# /etc/php/8.3/fpm/php.ini
memory_limit = 256M
max_execution_time = 300
upload_max_filesize = 64M
post_max_size = 64M
max_input_vars = 3000

sudo systemctl restart php8.3-fpm

# Instalează Redis
sudo apt install redis-server php8.3-redis -y

# Configurează Redis
sudo nano /etc/redis/redis.conf
# maxmemory 256mb
# maxmemory-policy allkeys-lru

# Instalează plugin Redis Object Cache în WordPress
# Setează define('WP_REDIS_DATABASE', 0); în wp-config.php

# DNS Cloudflare
# Setează domeniu.ro IP-ul serverului

# Reguli Cloudflare recomandate:
# - Cache Everything (TTL 1 zi)
# - Browser Cache TTL 1 lună
# - Auto Minify: HTML, CSS, JS
# - Brotli compression
# - Rocket Loader
# - Mirage pentru imagini