Deploy and Host Hardened WordPress on Railway

A security-focused WordPress setup: core, config and must-use plugins are baked into a read-only Docker image, MySQL is reachable only on Railway's private network, and every secret is generated per deployment.

About Hosting Hardened WordPress

WordPress core, wp-config.php and hardening rules are part of the image and can't be changed from wp-admin. Uploads (and optionally plugins/themes) live on a Railway volume at /data. PHP execution is blocked in uploads, XML-RPC and the web installer are disabled, and the site installs itself on first boot. The database gets two least-privilege users, and the MySQL root password is removed from the web server's environment before Apache starts.

Common Use Cases

Company and organisation websites that need a safer WordPress
Blogs and content sites without server maintenance
Agencies running many similar WordPress sites

Dependencies for Hardened WordPress Hosting

MySQL (Railway database, private network only)
Optional: Redis for object caching

Deployment Dependencies

Source: https://github.com/Digitalhjelp/Wordpress
WordPress: https://wordpress.org

Why Deploy Hardened WordPress on Railway?

Railway is a singular platform to deploy your infrastructure stack. Railway will host your infrastructure so you don't have to deal with configuration, while allowing you to vertically and horizontally scale it.

By deploying Hardened WordPress on Railway, you are one step closer to supporting a complete full-stack application with minimal burden. Host your servers, databases, AI agents, and more on Railway.