roots/bedrock
Bedrock
WordPress boilerplate with Composer and Git, easier configuration, and an improved folder structure
Features
- WordPress Composer Scaffolds - Scaffolds new WordPress sites using Composer with a modern boilerplate and dependency management.
- Composer-Based Project Scaffolds - Provides a modern WordPress project scaffold that manages core, plugins, and themes as Composer dependencies.
- Dependency Management - Manages WordPress core, plugins, and themes as Composer dependencies for reliable, collaborative development.
- WordPress Composer Dependency Managers - Manages WordPress core, plugins, and themes as Composer dependencies for reliable updates.
- WordPress Composer Package Managers - Treats WordPress core, plugins, and themes as Composer packages for reliable updates.
- Multisite Network Management - Supports WordPress multisite with admin URL fixes for subdomain installs.
- Environment-Specific Configurations - Loads environment-specific settings from a .env file and separate config files, so credentials and options differ between environments.
- Project Structures - Organizes WordPress sites with a cleaner folder layout separating web-root from application logic.
- Composer Module Packaging - Manages WordPress core, plugins, and themes as Composer packages for reliable versioning and automated updates.
- Environment-Specific Loading - Loads settings from .env files and environment-specific config directories to separate credentials and options per environment.
- Environment Variable Management - Loads configuration from a .env file using PHP dotenv, making credentials and settings available via getenv, $SERVER, or $ENV.
- Environment Variable Security - Reads sensitive values like database credentials from a .env file, keeping them out of version control.
- Production Security Hardening - Keeps sensitive files outside the web root and prevents modification of WordPress core and plugins in non-development environments.
- WordPress Security Hardening Practices - Keeps sensitive files outside the web root and audits dependencies for known vulnerabilities.
- Application Environment Flags - Defines the current environment as production, staging, or development via WP_ENV to modify behavior across the stack.
- Modern Project Directory Structures - Organizes code into a cleaner directory tree that separates web-root files from application logic, improving maintainability and security.
- Web Root Separated Structures - Places application logic outside the public web root directory to improve security and maintainability.
- WordPress File Structure Hardening - Keeps sensitive files outside the web root and prevents core/plugin modification in production environments.
- WordPress Multisite Configurations - Configures WordPress multisite networks with subdomain or subfolder support and URL fixes.
- WordPress Multisite Subdomain Configurations - Sets up WordPress multisite networks using subdomains with WP-CLI and URL fixer plugins.
- WordPress Multisite Subfolder Configurations - Sets up WordPress multisite networks using subfolders with custom Valet drivers and WP-CLI.
- Gitignore Configurations for Managed Dependencies - Excludes WordPress core and plugins from version control, keeping only custom code and configuration.
- Composer Installer Path Configurations - Configures Composer installer paths so regular plugins are installed into the mu-plugins directory.
- WordPress Must-Use Autoloaders - Provides a custom autoloader that registers standard plugins as auto-activated must-use plugins.
- WordPress Site Deployments - Deploys Bedrock sites using Trellis with the WP_ENV variable set to production.
- Dependency Vulnerability Scanning - Checks Composer packages against a WordPress vulnerability database during install, update, and audit commands.
