Skip to content

Instantly share code, notes, and snippets.

@einkoro
Last active December 15, 2021 18:50
Show Gist options
  • Save einkoro/a1754dc007862fef95a3 to your computer and use it in GitHub Desktop.
Save einkoro/a1754dc007862fef95a3 to your computer and use it in GitHub Desktop.
Easy WP SSL configuration: HTTPS and HTTP with reverse proxying support
<?php
/**
* The base configurations of the WordPress.
*
* This file has the following configurations: MySQL settings, Table Prefix,
* Secret Keys, WordPress Language, and ABSPATH. You can find more information
* by visiting {@link http://codex.wordpress.org/Editing_wp-config.php Editing
* wp-config.php} Codex page. You can get the MySQL settings from your web host.
*
* This file is used by the wp-config.php creation script during the
* installation. You don't have to use the web site, you can just copy this file
* to "wp-config.php" and fill in the values.
*
* @package WordPress
*/
// ** MySQL settings - You can get this info from your web host ** //
/** The name of the database for WordPress */
define('DB_NAME', '');
/** MySQL database username */
define('DB_USER', '');
/** MySQL database password */
define('DB_PASSWORD', '');
/** MySQL hostname */
define('DB_HOST', 'localhost');
/** Database Charset to use in creating database tables. */
define('DB_CHARSET', 'utf8');
/** The Database Collate type. Don't change this if in doubt. */
define('DB_COLLATE', '');
/**#@+
* Authentication Unique Keys and Salts.
*
* Change these to different unique phrases!
* You can generate these using the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}
* You can change these at any point in time to invalidate all existing cookies. This will force all users to have to log in again.
*
* @since 2.6.0
*/
define('AUTH_KEY', '');
define('SECURE_AUTH_KEY', '');
define('LOGGED_IN_KEY', '');
define('NONCE_KEY', '');
define('AUTH_SALT', '');
define('SECURE_AUTH_SALT', '');
define('LOGGED_IN_SALT', '');
define('NONCE_SALT', '');
/**#@-*/
/**
* WordPress Database Table prefix.
*
* You can have multiple installations in one database if you give each a unique
* prefix. Only numbers, letters, and underscores please!
*/
$table_prefix = 'wp_';
/**
* WordPress Localized Language, defaults to English.
*
* Change this to localize WordPress. A corresponding MO file for the chosen
* language must be installed to wp-content/languages. For example, install
* de_DE.mo to wp-content/languages and set WPLANG to 'de_DE' to enable German
* language support.
*/
define('WPLANG', '');
/**
* For developers: WordPress debugging mode.
*
* Change this to true to enable the display of notices during development.
* It is strongly recommended that plugin and theme developers use WP_DEBUG
* in their development environments.
*/
define('WP_DEBUG', false);
// Fix for CloudFlare SSL
if ( isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https' )
$_SERVER['HTTPS'] = 'on';
// URL scheme for HTTP or HTTPS
$scheme = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on' ? 'https' : 'http';
// Define Site URL: WordPress in a subdirectory.
if ( ! defined( 'WP_SITEURL' ) )
define( 'WP_SITEURL', $scheme . '://' . $_SERVER['HTTP_HOST'] . '/wordpress/' );
// Define Home URL
if ( ! defined( 'WP_HOME' ) )
define( 'WP_HOME', $scheme . '://' . $_SERVER['HTTP_HOST'] );
// Define path & url for Content
define( 'WP_CONTENT_DIR', dirname(__FILE__) . '/www/wp-content' );
define( 'WP_CONTENT_URL', WP_HOME . '/wp-content' );
// Set path to MU Plugins.
define( 'WPMU_PLUGIN_DIR', dirname(__FILE__) . '/www/wp-content/mu-plugins' );
define( 'WPMU_PLUGIN_URL', WP_HOME . '/wp-content/mu-plugins' );
// Set path for uploads
//define( 'UPLOADS', dirname(__FILE__) . '/www/wp-uploads' );
// Set default permissions for uploads
// This is required since we run php as a different user than the httpd!
define( 'FS_CHMOD_DIR', ( 02750 & ~umask() ) );
define( 'FS_CHMOD_FILE', ( 0640 & ~ umask() ) );
// Set default theme.
//define( 'WP_DEFAULT_THEME', '' );
// Prevent editing of files through the admin.
define( 'DISALLOW_FILE_EDIT', true );
// Force SSL for admin/login
//define('FORCE_SSL_LOGIN', true);
define('FORCE_SSL_ADMIN', true);
// Disable WP Cron
define('DISABLE_WP_CRON', true);
/* That's all, stop editing! Happy blogging. */
/** Absolute path to the WordPress directory. */
//if ( !defined('ABSPATH') )
// define('ABSPATH', dirname(__FILE__) . '/www/wordpress/');
/** Sets up WordPress vars and included files. */
require_once(ABSPATH . 'wp-settings.php');
<?php
/**
* Front to the WordPress application. This file doesn't do anything, but loads
* wp-blog-header.php which does and tells WordPress to load the theme.
*
* @package WordPress
*/
/**
* Tells WordPress to load the WordPress theme and output it.
*
* @var bool
*/
define('WP_USE_THEMES', true);
/** Loads the WordPress Environment and Template */
require('./wordpress/wp-blog-header.php');
<?php
/** Absolute path to the WordPress directory. */
if ( !defined('ABSPATH') )
define('ABSPATH', dirname(__FILE__) . '/wordpress/');
/** Location of your WordPress configuration. */
require_once(dirname(__FILE__) . '/../wp-config.php');
@einkoro
Copy link
Author

einkoro commented May 28, 2014

Of note this expects WordPress to have its own directory and for the main wp-config.php to be outside of the web accessible directory:

- wp-config.php
+ www/
  - www/index.php
  - www/wp-config.php
  - www/wordpress/
...

It will also force admin and login over HTTPS and beware the default file and directory permissions on uploads – depending on your httpd, php or hhvm configuration you might need to change this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment