• WordPress ¹⁾
• Realm of Espionage
• https://blog.realmofespionage.xyz

• Windows 10
• freenginx + PHP + PHP-CGI
• Certbot (Let's Encrypt)

• https://wordpress.org/about/requirements/
• https://make.wordpress.org/hosting/handbook/server-environment/#php-extensions

• https://www.git-scm.com/download/win
• Last tested: Git-2.47.0.2-64-bit.exe

• Git from the command line and also from 3rd-party software

• https://mariadb.org/download/
• Last tested: mariadb-11.6.2-winx64.msi

• No Development components or Third party tools
• Use UTF8 as default server's character set
• [x] Enable Networking

• https://github.com/WordPress/WordPress/commits/master/

git clone --branch "master" --depth "1" --recurse-submodules "https://github.com/WordPress/WordPress.git" "%SystemDrive%\www\blog"

explorer "%SystemDrive%\www\blog"

"%ProgramFiles%\MariaDB 11.6\bin\mariadb.exe" -u "root" -p

CREATE DATABASE wordpress;

CREATE USER 'wordpress'@'localhost' IDENTIFIED BY 'x';

GRANT ALL PRIVILEGES ON wordpress.* to 'wordpress'@'localhost';

FLUSH PRIVILEGES;

EXIT

notepad "%SystemDrive%\www\php\blog.ini"

[PHP]
; Modules
extension_dir = ".\ext"
extension = "curl"
extension = "exif"
extension = "fileinfo"
extension = "gd"
extension = "intl"
extension = "mbstring"
extension = "mysqli"
extension = "openssl"
extension = "sodium"
zend_extension = "opcache"

; Settings
[Date]
date.timezone = "America/New_York"

; End

CD "%SystemDrive%\" && "php.exe" -c "%SystemDrive%\www\php\blog.ini" -m

• fastcgi_params include hard-coded to freenginx version path

notepad "%SystemDrive%\www\nginx\default.d\blog.conf"

# PHP-CGI
location ~ \.(php)(/.*)?$ {
    fastcgi_split_path_info ^(.+\.(?:php))(/.*)$;
    fastcgi_intercept_errors "on";
    fastcgi_index "index.php";
    include "C:/freenginx-1.27.4/conf/fastcgi_params";
    fastcgi_param "SCRIPT_FILENAME" $document_root$fastcgi_script_name;
    fastcgi_param "PATH_INFO" $fastcgi_path_info;
    fastcgi_param "HTTPS" "on";
    fastcgi_pass "127.0.0.1:9004";
}

notepad "%SystemDrive%\www\nginx\vhosts.d\blog.conf"

server {
    listen "443" "ssl";
    http2 "on";
    server_name "blog.realmofespionage.xyz";
    root "C:/www/blog";
    index "index.php";

    include C:/www/nginx/default.d/blog.conf;
    include C:/www/nginx/default.d/headers.conf;

    client_max_body_size "10M";

#    add_header Content-Security-Policy "default-src "self"; script-src "self" "unsafe-inline" "unsafe-eval"; style-src "self" "unsafe-inline"" always;

#    access_log  logs/blog-access.log;
#    error_log  logs/blog-error.log;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    rewrite /wp-admin$ $scheme://$host$uri/ permanent;

    location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
          access_log off; log_not_found off; expires max;
    }
}

"%SystemDrive%\www\scripts\freenginx\Reload.bat"

MKDIR "%SystemDrive%\www\scripts\blog"

explorer "%SystemDrive%\www\scripts\blog"

notepad "%SystemDrive%\www\scripts\blog\PHP-CGI.bat"

SET "PHP_FCGI_MAX_REQUESTS=0"
SET "PHP_FCGI_CHILDREN=1"

START "Blog PHP-CGI" "php-cgi.exe" -b "127.0.0.1:9004" -c "%SystemDrive%\www\php\blog.ini" -q

:: End

"%SystemDrive%\www\scripts\blog\PHP-CGI.bat"

explorer "%ProgramData%\Microsoft\Windows\Start Menu\Programs\StartUp"

"%SystemDrive%\www\scripts\blog\PHP-CGI.bat"

Blog PHP-CGI

• https://github.com/WordPress/WordPress/commits/master/

notepad "%SystemDrive%\www\scripts\blog\Update.bat"

@echo off

"git.exe" -C "%SystemDrive%\www\blog" reset --hard
"git.exe" -C "%SystemDrive%\www\blog" pull origin "master" --rebase

pause

:: End

"%SystemDrive%\www\scripts\blog\Update.bat"

notepad "%SystemDrive%\www\scripts\blog\Maintenance.bat"

@echo off

"git.exe" -C "%SystemDrive%\www\blog" gc --aggressive --prune="all"
"git.exe" -C "%SystemDrive%\www\blog" fsck --full --strict

pause

:: End

"%SystemDrive%\www\scripts\blog\Maintenance.bat"

• https://blog.realmofespionage.xyz

• https://developer.wordpress.org/advanced-administration/wordpress/update-services/#xml-rpc-ping-services