Repository navigation

cms: Replace Wordfence's scanner with Salt-managed checks and harden WordPress hosting - #660

Merged

jpmckinney merged 14 commits into

mainfrom

claude/wordfence-necessity-lospi2

Sep 14, 2026

Merged

cms: Replace Wordfence's scanner with Salt-managed checks and harden WordPress hosting#660
jpmckinney merged 14 commits into
mainfrom
claude/wordfence-necessity-lospi2

Commits on Sep 14, 2026
- feat(cms): Add opt-in integrity and updates checks to substitute for Wordfence
  
  James McKinney
  authored and
  jpmckinney
  committed
  64ee903
- feat(cms): Report plugins whose update API gave no answer
  
  James McKinney
  authored and
  jpmckinney
  committed
  2a9a566
- feat(apache): Deny HTTP access to dotfiles
  jpmckinney
  committed
  4d0a9fc
- feat(apache): Deny wp-config.php, dot-directories and core includes; manage WordPress file modes
  jpmckinney
  committed
  a187dc5
- feat(cms): Add require-two-factor mu-plugin, enabled on coalition
  jpmckinney
  committed
  bc5de51
- feat(cms): Set wp-config.php constants from pillar
  jpmckinney
  committed
  de9d5a6
- feat(cms): Limit Two Factor to authenticator apps and backup codes
  jpmckinney
  committed
  306a8da
- refactor(cms): Rename wordpress.sites.*.plugins to mu_plugins
  jpmckinney
  committed
  adf89f5
- refactor(cms): Loop over WordPress sites only
  jpmckinney
  committed
  e8092b1
- refactor(cms): Move must-use plugins to files/mu-plugins
  jpmckinney
  committed
  578a234
- feat(cms): Add disable-user-enumeration mu-plugin, enabled on coalition
  jpmckinney
  committed
  9f3de97
- refactor(cms): List the must-use plugins for every site in pillar/cms.sls
  jpmckinney
  committed
  ff77a8f
- docs(wordpress): Reorder the setup steps around one deploy, and install with your own user
  jpmckinney
  committed
  bf1f763
- chore(cms): Stop skipping the iThemes Security and Broken Link Checker tables
  
  jpmckinney
  and
  claude
  committed
  f23bde0

Commits

Commits on Sep 14, 2026