1. LEMP Stack Installation
On a clean Debian 12 or Ubuntu 24.04 install, update package repositories and deploy modern LEMP components alongside Redis:
# Install Nginx, MariaDB, Redis, and Certbot SSL tools
apt update && apt install -y nginx mariadb-server redis-server certbot python3-certbot-nginx wget curl unzip
# Install PHP 8.3 and required WordPress extensions
apt install -y php8.3-fpm php8.3-mysql php8.3-curl php8.3-gd php8.3-mbstring php8.3-xml php8.3-zip php8.3-redis php8.3-opcache php8.3-intl
2. Database & User Configuration
Create an isolated utf8mb4 database and non-root user dedicated to your WordPress installation:
mariadb -u root
-- Run SQL queries:
CREATE DATABASE wp_production CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'wp_user'@'localhost' IDENTIFIED BY 'STRONG_SECRET_PASS_2026';
GRANT ALL PRIVILEGES ON wp_production.* TO 'wp_user'@'localhost';
FLUSH PRIVILEGES; EXIT;
3. WordPress Download & File Permissions
Download the official WordPress release, extract to the web root, and apply secure directory permissions:
# 1. Create web directory and fetch WordPress archive
mkdir -p /var/www/yourdomain.com && cd /tmp
wget https://wordpress.org/latest.tar.gz
tar -xzf latest.tar.gz && cp -r wordpress/* /var/www/yourdomain.com/
# 2. Assign ownership to www-data (dirs 755, files 644)
chown -R www-data:www-data /var/www/yourdomain.com
find /var/www/yourdomain.com/ -type d -exec chmod 755 {} \;
find /var/www/yourdomain.com/ -type f -exec chmod 644 {} \;
4. Production Nginx VHost & Microcaching
Create /etc/nginx/sites-available/yourdomain.com with FastCGI microcaching and xmlrpc brute-force protection:
fastcgi_cache_path /var/run/nginx-cache levels=1:2 keys_zone=WORDPRESS:100m inactive=60m max_size=1g;
server {
listen 80;
server_name yourdomain.com www.yourdomain.com;
root /var/www/yourdomain.com;
index index.php index.html;
location / {
try_files $uri $uri/ /index.php?$args;
}
location ~ \.php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/run/php/php8.3-fpm.sock;
fastcgi_cache WORDPRESS;
fastcgi_cache_valid 200 60m;
}
# Block XML-RPC to prevent brute-force attacks
location = /xmlrpc.php { deny all; access_log off; }
}
Enable configuration: ln -s /etc/nginx/sites-available/yourdomain.com /etc/nginx/sites-enabled/ && nginx -t && systemctl reload nginx
5. Redis Object Cache Setup
⚡ Caching Recommendation:
Install the open-source Redis Object Cache plugin in WordPress and add define('WP_REDIS_HOST', '127.0.0.1'); to wp-config.php. Repeated database queries will be served from RAM, cutting response times and CPU overhead.
6. Automated Let’s Encrypt SSL
certbot --nginx -d yourdomain.com -d www.yourdomain.com
7. Troubleshooting & FAQ
Q:How do I fix "Error establishing a database connection"?
Verify MariaDB status with "systemctl status mariadb", confirm matching credentials inside wp-config.php, and ensure privileges were flushed.
Q:Why do plugin or theme uploads fail with file permission errors?
Ownership is misassigned. Execute "chown -R www-data:www-data /var/www/yourdomain.com" and set directories to 755 and files to 644.
Q:How to protect WordPress from XML-RPC flood attacks on Netcup?
Add "location = /xmlrpc.php { deny all; access_log off; }" inside your Nginx server block to eliminate brute-force amplification vectors.
Markus S.
Senior Cloud Infrastructure Architect & Linux Sysadmin
Markus focuses on European cloud hosting economics, server performance optimization, and KVM virtualization. All benchmarks, setup guides, and VAT exemption procedures are verified on self-funded Netcup instances hosted in the Nuremberg datacenter (AMD EPYC hardware).
📚 Recommended Reading: Essential Netcup Guides & Benchmarks
Hands-on tutorials to help you maximize savings, configure servers, and make informed choices
Netcup 0% VAT Exemption Guide: Automatic Tax Removal for Non-EU Users
Complete walkthrough on qualifying for automatic 0% German VAT, invoice updates, and billing formulas.
Netcup Registration & Order Guide: Identity Verification & Fraud Check Tips
From plan selection to CCP portal activation. Avoid order cancellations and delays.
Netcup vs Hetzner Cloud: Geekbench 6 Scores, Network Routing & Pricing Comparison
In-depth analysis of dedicated vCPU consistency, traffic quotas, and datacenter connectivity.
Netcup Custom ISO Tutorial: Install Windows & Linux via SCP Panel
Mount external ISOs with VirtIO drivers via Server Control Panel (SCP) and VNC access.
💰 Netcup Verified Coupons & Discounts
We maintain an updated collection of verified netcup discount codes, with real-time automatic synchronization. Get up to 30% off or free months on your next order.
Browse All Coupons →