Appearance

WordPress Configuration ​

Legend

⚙️ (Auto): This symbol indicates that the plugin is automatically performed this configuration.

Initial Setup ​

The following settings must be configured when the site is first setup and while in the Development environment:

Activity Log ​

» Settings

  • Visitor IP Detected: Select the appropriate forwarding header

Gravity Forms ​

» Settings

  • reCaptcha
    • Add V3 Keys
    • Score threshold to 0.7
    • Check "I have added the reCAPTCHA branding, terms of service and privacy policy to my site."

Pages ​

  • ⚙️ Create a Home page
  • ⚙️ Create a Blog page (use the appropriate name as per the site map)

Tools ​

» Redirection

  • Start setup
  • Check: Monitor permalink changes in WordPress posts and pages
  • Options
    • URL Monitor
      • Enable for all custom post types as appropriate

Settings ​

» General

  • ⚙️ Site title
  • ⚙️ Tagline: (you may leave it empty)
  • Add site icon (a 512x512 PNG image)
  • ⚙️ WordPress Address and Site Address: should be the same and use https
  • ⚙️ Administration Email: use [client name]@lyquix.com email address
  • ⚙️ Uncheck "Anyone can register"
  • ⚙️ Time zone: America/New York
  • ⚙️ Date Format: June 27, 2024
  • ⚙️ Time format: 6:15 pm
  • ⚙️ Week starts on: Monday

» Writing

  • No action needed

» Reading

  • ⚙️ Your homepage displays:
    • ⚙️ A static page
    • ⚙️ Homepage: select the Home page created above
    • ⚙️ Posts page: select the Blog page created above
  • ⚙️ For each post in a feed, include: Excerpt
  • Check "Discourage search engines from indexing this site"

» Permalinks

  • ⚙️ Custom structure: use the slug of the Blog page followed by post name, for example: /blog/%postname%/

» Duplicate Post

  • Permissions
    • Enable for these post types: enable it for custom post types

» SCPOrder

  • Enable it for custom post types and taxonomies that require it

» Zero Spam

  • Settings
    • Dashboard visibility: select Administrator
  • Stop Forum Spam
    • Check Enabled
  • Project Honeypot
    • Check Enabled
    • Access Key: xeinmjenbilz
  • User Login
    • Check: Protect and monitor login attempts
    • Check: Log blocked login attempts
  • Gravity Forms
    • Check: Protect and monitor Gravity Form submissions
    • Check: Log Blocked Gravity Form submissions

» EWWW Image Optimizer

  • Essential
    • Enable Ludicrous mode
    • Check: Remove metadata
    • Resize Images: 3840x3840
    • Uncheck: Add width/height attributes
    • Check: Lazy load
    • Check Automated scaling
    • Check: Webp Conversion
    • Click on Insert Rewrite Rules
    • Check: JS WebP Rewriting
    • Check: Picture WebP Rewriting
    • Check: Force WebP
  • Local
    • JPG, PNG, GIF optimization level: Pixel Perfect
    • PDF and SVG optimization level: No Compression
    • Backup Originals: Local
  • Advanced
    • Enable Scheduled Optimization
    • Enable Include Media Folders

» Menu Editor Pro

  • No action needed

Site Settings ​

  • Reset Global Settings
    • Select all and click Reset Global Settings

Performance (W3 Total Cache) ​

This plugin should be activated, but none of the caching systems should be enabled in the Local and Development environments

Post SMTP ​

» Settings

  • Connections
    • Transport Type: Other SMTP
    • Outgoing Mail Server: in-v3.mailjet.com
    • Outgoing Mail Port: 587
    • Envelope From Email Address: typically no-reply@domain.com
    • Security: STARTTLS
    • Authentication: Login
    • Set username and password
  • Message
    • From Address
      • Email Address: typically no-reply@domain.com
      • Check: Prevent plugins and themes from changing this
  • Advanced
    • Miscellaneous Settings
      • Delivery mode: Log Only

Wordfence ​

» All Options

  • Firewall Options
    • Protection Level: Optimize WordPress Firewall (changes to htaccess)
  • Brute Force Protection
    • Lock out after login failures/password reset attempts: 5
    • Count failures over: 1 hour
    • Amount of time user is locked out: 12 hours
    • Prevent the use of leaked passwords: force admins and publishers
    • Enforce Strong Passwords: All Users
  • Scan Options
    • General Options
      • Enable Scan plugin files against repository
      • Enable Scan theme files against repository
      • Enable Scan files outside your WordPress installation
      • Enable Scan images, binary, and other files as if they were executable

» Login Security

  • Disable XML-RPC auth
  • Enable reCaptcha
  • reCaptcha threshold: 0.7

Yoast SEO ​

» Settings

  • Site Basics
    • Website name
    • Site image 1200x675 pixels
    • Site representation
    • Organization name
    • Organization logo 696x696 pixels
    • Other profiles: get the client Facebook and Twitter/X URLs
  • Content types
    • Custom post types
      • As needed, uncheck show [post type] in search results
    • Categories
      • Uncheck Show categories in search results
    • Tags
      • Uncheck Show tags in search results
    • Custom taxonomies
      • By default, uncheck Show [taxonomy] in search results
  • Advanced
    • Crawl optimization
      • Enable ALL the options on this page, except for
        • Disable unwanted content formats
        • Remove global feed
        • Block unwanted bots
        • Prevent Google AdsBot from crawling
    • Advanced: URL Cleanup
      • Optimize Google Analytics utm tracking parameters
      • Remove unregistered URL parameters
    • Author Archives, Date Archives, Format Archives
      • Uncheck Show [author, date, format] archives in search results

New Custom Post Types and Taxonomies ​

The following settings need to be updated when new Custom Post Types or Taxonomies are added to the site:

Tools ​

» Redirection

  • Options
    • URL Monitor
      • Enable for all custom post types as appropriate

Settings ​

» Duplicate Post

  • Permissions
    • Enable for these post types: enable it for custom post types

» SCPOrder

  • Enable it for custom post types and taxonomies that require it

Yoast SEO ​

» Settings

  • Content types
    • Custom post types
      • As needed, uncheck show [post type] in search results
    • Custom taxonomies
      • By default, uncheck Show [taxonomy] in search results

Production Environment ​

The following settings need to be changed for Production environment:

Settings ​

» Reading

  • Uncheck "Discourage search engines from indexing this site"

Post SMTP ​

» Settings

  • Advanced
    • Miscellaneous Settings
      • Delivery mode: Log Email and Send

And the following settings must be configured:

Appearance ​

» Customize

  • Analytics
    • Get GA4 Measurement ID when using Google Analytics stand-alone
    • If GA is loaded via GTM select that option and load the GTM account number
    • Get the Microsoft Clarity Project ID

Performance (W3 Total Cache) ​

» General Settings

  • Page Cache
    • Enabled
    • Method: Disk Enhanced
  • Opcode Cache
    • Zend Opcache
  • Database Cache
    • Enabled
    • Method: Redis
  • Object Cache
    • Enabled
    • Method: Redis
  • Browser Cache
    • Enabled

» Extensions

  • Yoast SEO
    • Activate

Wordfence ​

  • Login Security
    • 2FA Roles: set to Required for all except Administrator

Confidential - Do not share!

© 2008 - 2025 Lyquix