# roots/bedrock

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/roots-bedrock).**

6,531 stars · 1,176 forks · PHP · MIT

## Links

- GitHub: https://github.com/roots/bedrock
- Homepage: https://roots.io/bedrock/
- awesome-repositories: https://awesome-repositories.com/repository/roots-bedrock.md

## Topics

`bedrock` `composer` `php` `wordpress` `wordpress-boilerplate` `wordpress-composer` `wordpress-starter` `wp-composer` `wp-packages`

## Description

WordPress boilerplate with Composer and Git, easier configuration, and an improved folder structure

## Tags

### Programming Languages & Runtimes

- [WordPress Composer Scaffolds](https://awesome-repositories.com/f/programming-languages-runtimes/toolchain-installers/composer-wrappers/composer-installations/wordpress-composer-scaffolds.md) — Scaffolds new WordPress sites using Composer with a modern boilerplate and dependency management.
- [Composer Module Packaging](https://awesome-repositories.com/f/programming-languages-runtimes/module-and-package-management/composer-module-packaging.md) — Manages WordPress core, plugins, and themes as Composer packages for reliable versioning and automated updates.
- [Environment-Specific Loading](https://awesome-repositories.com/f/programming-languages-runtimes/runtime-execution-environments/runtime-environments/language-runtimes/ruby-environments/configuration-loading/environment-specific-loading.md) — Loads settings from .env files and environment-specific config directories to separate credentials and options per environment.

### Software Engineering & Architecture

- [Composer-Based Project Scaffolds](https://awesome-repositories.com/f/software-engineering-architecture/extensible-plugin-architectures/scaffolding-plugins/wordpress-plugin-scaffolds/composer-based-project-scaffolds.md) — Provides a modern WordPress project scaffold that manages core, plugins, and themes as Composer dependencies.
- [Application Environment Flags](https://awesome-repositories.com/f/software-engineering-architecture/application-lifecycle-management/configuration-management/environment-variable-management/environment-variables/environment-variable-sets/application-environment-flags.md) — Defines the current environment as `production`, `staging`, or `development` via `WP_ENV` to modify behavior across the stack. ([source](https://roots.io/bedrock/docs/environment-variables/))

### Part of an Awesome List

- [Dependency Management](https://awesome-repositories.com/f/awesome-lists/devtools/dependency-management.md) — Manages WordPress core, plugins, and themes as Composer dependencies for reliable, collaborative development. ([source](https://cdn.jsdelivr.net/gh/roots/bedrock@master/README.md))

### Content Management & Publishing

- [WordPress Composer Dependency Managers](https://awesome-repositories.com/f/content-management-publishing/multi-site-management-systems/wordpress-management/wordpress-composer-dependency-managers.md) — Manages WordPress core, plugins, and themes as Composer dependencies for reliable updates.
- [WordPress Composer Package Managers](https://awesome-repositories.com/f/content-management-publishing/multi-site-management-systems/wordpress-management/wordpress-composer-package-managers.md) — Treats WordPress core, plugins, and themes as Composer packages for reliable updates.
- [Multisite Network Management](https://awesome-repositories.com/f/content-management-publishing/multisite-network-management.md) — Supports WordPress multisite with admin URL fixes for subdomain installs. ([source](https://roots.io/bedrock/docs/installation/))
- [WordPress Multisite Configurations](https://awesome-repositories.com/f/content-management-publishing/multisite-network-management/wordpress-multisite-configurations.md) — Configures WordPress multisite networks with subdomain or subfolder support and URL fixes.
- [WordPress Multisite Subdomain Configurations](https://awesome-repositories.com/f/content-management-publishing/multisite-network-management/wordpress-multisite-subdomain-configurations.md) — Sets up WordPress multisite networks using subdomains with WP-CLI and URL fixer plugins. ([source](https://roots.io/bedrock/docs/bedrock-with-valet/))
- [WordPress Multisite Subfolder Configurations](https://awesome-repositories.com/f/content-management-publishing/multisite-network-management/wordpress-multisite-subfolder-configurations.md) — Sets up WordPress multisite networks using subfolders with custom Valet drivers and WP-CLI. ([source](https://roots.io/bedrock/docs/bedrock-with-valet/))

### Development Tools & Productivity

- [Environment-Specific Configurations](https://awesome-repositories.com/f/development-tools-productivity/feature-flag-management/environment-specific-configurations.md) — Loads environment-specific settings from a `.env` file and separate config files, so credentials and options differ between environments. ([source](https://roots.io/bedrock/docs/))
- [Project Structures](https://awesome-repositories.com/f/development-tools-productivity/plugin-development-kits/wordpress/project-structures.md) — Organizes WordPress sites with a cleaner folder layout separating web-root from application logic.
- [Gitignore Configurations for Managed Dependencies](https://awesome-repositories.com/f/development-tools-productivity/git-repository-managers/gitignore-configurations-for-managed-dependencies.md) — Excludes WordPress core and plugins from version control, keeping only custom code and configuration. ([source](https://roots.io/bedrock/))

### Security & Cryptography

- [Environment Variable Management](https://awesome-repositories.com/f/security-cryptography/environment-variable-management.md) — Loads configuration from a `.env` file using PHP dotenv, making credentials and settings available via `getenv`, `$_SERVER`, or `$_ENV`. ([source](https://roots.io/bedrock/docs/environment-variables/))
- [Environment Variable Security](https://awesome-repositories.com/f/security-cryptography/environment-variable-security.md) — Reads sensitive values like database credentials from a .env file, keeping them out of version control. ([source](https://roots.io/bedrock/docs/installation/))
- [Production Security Hardening](https://awesome-repositories.com/f/security-cryptography/network-infrastructure-security/deployment-security/production-security-hardening.md) — Keeps sensitive files outside the web root and prevents modification of WordPress core and plugins in non-development environments. ([source](https://roots.io/bedrock/))
- [WordPress Security Hardening Practices](https://awesome-repositories.com/f/security-cryptography/security-scanners/wordpress-security-scanning/wordpress-security-hardening-practices.md) — Keeps sensitive files outside the web root and audits dependencies for known vulnerabilities.
- [Dependency Vulnerability Scanning](https://awesome-repositories.com/f/security-cryptography/security-auditing/dependency-vulnerability-scanning.md) — Checks Composer packages against a WordPress vulnerability database during install, update, and audit commands. ([source](https://roots.io/bedrock/docs/auditing-wordpress-vulnerabilities-with-composer/))

### Web Development

- [Modern Project Directory Structures](https://awesome-repositories.com/f/web-development/modern-project-directory-structures.md) — Organizes code into a cleaner directory tree that separates web-root files from application logic, improving maintainability and security. ([source](https://cdn.jsdelivr.net/gh/roots/bedrock@master/README.md))
- [Web Root Separated Structures](https://awesome-repositories.com/f/web-development/web-root-separated-structures.md) — Places application logic outside the public web root directory to improve security and maintainability.
- [WordPress File Structure Hardening](https://awesome-repositories.com/f/web-development/web-security-hardening/wordpress-file-structure-hardening.md) — Keeps sensitive files outside the web root and prevents core/plugin modification in production environments.

### DevOps & Infrastructure

- [Composer Installer Path Configurations](https://awesome-repositories.com/f/devops-infrastructure/release-automation/plugin-extensibility/data-source-extensions/plugin-installations/must-use-plugin-deployments/composer-installer-path-configurations.md) — Configures Composer installer paths so regular plugins are installed into the mu-plugins directory. ([source](https://roots.io/bedrock/docs/composer/))
- [WordPress Must-Use Autoloaders](https://awesome-repositories.com/f/devops-infrastructure/release-automation/plugin-extensibility/data-source-extensions/plugin-installations/must-use-plugin-deployments/wordpress-must-use-autoloaders.md) — Provides a custom autoloader that registers standard plugins as auto-activated must-use plugins. ([source](https://roots.io/bedrock/docs/))
- [WordPress Site Deployments](https://awesome-repositories.com/f/devops-infrastructure/static-site-deployment/wordpress-site-deployments.md) — Deploys Bedrock sites using Trellis with the WP_ENV variable set to production. ([source](https://roots.io/bedrock/docs/deployment/))