feat: add internal WordPress cron runner

This commit is contained in:
bisco
2026-07-23 23:40:44 +02:00
parent f75bce3dea
commit e6ec3c94dc
15 changed files with 245 additions and 24 deletions
+7 -4
View File
@@ -12,10 +12,13 @@ structured editorial content survives a theme change. These custom post types ar
editorial data sources for the homepage, not standalone public routes or REST
collections. Images use WordPress featured images with local SVG fallbacks.
WP-CLI is an opt-in tools-profile service. Its idempotent bootstrap installs WordPress,
activates the theme, configures the site, and creates realistic demo content. Certbot is
another optional service, enabled only for direct deployments. It shares challenge and
certificate volumes with NGINX but has no container-control access.
`wp-cron` is an internal WP-CLI runner on the `data` network. It executes due scheduled
events with `wp cron event run --due-now` and keeps public `wp-cron.php` requests
blocked. WP-CLI is also available as an opt-in tools-profile service. Its idempotent
bootstrap installs WordPress, activates the theme, configures the site, and creates
realistic demo content. Certbot is another optional service, enabled only for direct
deployments. It shares challenge and certificate volumes with NGINX but has no
container-control access.
Apache includes a small defense-in-depth hardening file that denies uploaded PHP files,
direct `wp-config.php` requests, and direct access to selected internal WordPress PHP