Secure WordPress Site running on Linux

Sample configurations

 

Sample of .htaccess

<files wp-config.php>
order allow,deny
deny from all
</files>

<files readme.html>
order allow,deny
deny from all
</files>

<files wp-login.php>
order deny,allow
deny from all
allow from xxx.xxx.xxx.xxx
</files>

 

Reference: https://codex.wordpress.org/Hardening_WordPress