Quick start: Set up WordPress

Deploy with ROS (recommended)

1. Click One-click deployment, configure the parameters as prompted, and then click Deploy Now.

   Key parameters:

   • Region: Select the region where you want to create the ECS instance.

   • Instance source:

     If you have specific requirements for billing, disks, or networking, we recommend that you purchase an ECS instance in advance and then select an existing instance for deployment. For more information, see Create an instance by using the custom launch method.

     Create a new instance

     ROS automatically creates a preemptible instance and deploys WordPress on it. Because preemptible instances do not support ICP filing, create a subscription instance for at least three months if you need this filing. Then, select the existing instance for automatic WordPress deployment.

     • Instance image: Select one of the following images:

       • Ubuntu 20.04/22.04

       • CentOS 7.7/7.8/7.9

       • Alibaba Cloud Linux 3.2104 LTS 64-bit (Recommended)

     • Instance Type: Select an instance type based on your needs. For more information, see Instance families.

     • Instance password: Enter and confirm the password for the ECS instance.

     Select an existing instance

     ROS automatically deploys WordPress on the selected instance. The ECS instance must have public internet access and run one of the following operating systems:

     Note

     If you did not assign a public IP address when you purchased the instance, associate an Elastic IP Address (EIP) with it. For more information, see Associate an EIP.

     • Ubuntu 20.04/22.04

     • CentOS 7.7/7.8/7.9

     • Alibaba Cloud Linux 3.2104

2. ROS automatically deploys the resources. The deployment is complete when the progress reaches 100%.

   Note

   After deploying WordPress, you can perform the following operations:

   • View created resources: In the ROS console, you can view information about the created resources, such as the ECS instance, VPC, and security group. For more information, see View a stack.

   • Change the MySQL database password: Run the command sudo grep 'temporary password' /var/log/mysqld.log to view and then change the initial password for the root user. For more information, see FAQ.

3. Click View Deployed Site. You are redirected to the WordPress configuration page.

4. Fill in the required information, and then click Install WordPress.

   Parameters:

   • Site title: The name of your WordPress site. For example, demowp.

   • User Name: The username for logging in to WordPress. Choose a secure username. For example, testwp.

   • Password: The password for logging in to WordPress. Use a strong password. For example, Wp.123456.

   • Your email: The email address for receiving notifications. For example, username@example.com.

5. Click Log In. Enter the username testwp and password Wp.123456 that you set during the installation, and then click Log In.

   You are now logged in to your WordPress site. For more information about using WordPress, see the official WordPress documentation.

   After you log in, the WordPress admin Dashboard is displayed. The navigation pane on the left includes menus such as Posts, Media, Pages, Comments, and Appearance, which you can use to start managing your site content.

Use a Marketplace image

Deploy with Terraform

1. Click One-click deployment to go to Terraform Explorer, where the following Terraform code is automatically loaded.

   Terraform code

   // Instance name
   variable "name" {
     default = "terraform-example"
   }
   
   // Instance type
   variable "instance_type" {
     default = "ecs.e-c1m2.large"
   }
   
   // Instance logon password
   variable "instance_password" {
     default = "Test@12345"
   }
   
   // Region
   variable "region" {
     default = "cn-beijing"
   }
   
   provider "alicloud" {
     region = var.region
   }
   
   variable "create_instance" {
     default = true
   }
   
   // Instance ID
   variable "instance_id" {
     default = ""
   }
   
   // Image ID
   variable "image_id" {
     default = "ubuntu_22_04_x64_20G_alibase_20241224.vhd"
   }
   
   // Create a VPC.
   resource "alicloud_vpc" "vpc" {
     count      = var.create_instance ? 1 : 0
     cidr_block = "192.168.0.0/16"
   }
   
   // Create a VSwitch.
   resource "alicloud_vswitch" "vswitch" {
     count        = var.create_instance ? 1 : 0
     vpc_id       = alicloud_vpc.vpc[0].id
     cidr_block   = "192.168.0.0/16"
     zone_id      = data.alicloud_zones.default.zones.0.id
     vswitch_name = var.name
   }
   
   // Create a security group.
   resource "alicloud_security_group" "group" {
     count               = var.create_instance ? 1 : 0
     security_group_name = var.name
     description         = "foo"
     vpc_id              = alicloud_vpc.vpc[0].id
   }
   
   // Create security group rules (example only; configure rules based on your security policies).
   resource "alicloud_security_group_rule" "allow_all_tcp" {
     count             = var.create_instance ? 1 : 0
     type              = "ingress"                           # Rule type: inbound
     ip_protocol       = "tcp"                               # Protocol type: TCP
     policy            = "accept"                            # Policy: accept
     port_range        = "22/22"                             # Port range: only port 22
     priority          = 1                                   # Priority: 1
     security_group_id = alicloud_security_group.group[0].id # Associate with the previously created security group
     cidr_ip           = "0.0.0.0/0"                         # Allow access from all IP addresses
   }
   
   resource "alicloud_security_group_rule" "allow_tcp_80" {
     count             = var.create_instance ? 1 : 0
     type              = "ingress"
     ip_protocol       = "tcp"
     nic_type          = "intranet"
     policy            = "accept"
     port_range        = "80/80"
     priority          = 1
     security_group_id = alicloud_security_group.group[0].id
     cidr_ip           = "0.0.0.0/0"
   }
   
   resource "alicloud_security_group_rule" "allow_tcp_443" {
     count             = var.create_instance ? 1 : 0
     type              = "ingress"
     ip_protocol       = "tcp"
     nic_type          = "intranet"
     policy            = "accept"
     port_range        = "443/443"
     priority          = 1
     security_group_id = alicloud_security_group.group[0].id
     cidr_ip           = "0.0.0.0/0"
   }
   
   resource "alicloud_security_group_rule" "allow_icmp_all" {
     count             = var.create_instance ? 1 : 0
     type              = "ingress"
     ip_protocol       = "icmp"
     nic_type          = "intranet"
     policy            = "accept"
     port_range        = "-1/-1"
     priority          = 1
     security_group_id = alicloud_security_group.group[0].id
     cidr_ip           = "0.0.0.0/0"
   }
   
   data "alicloud_zones" "default" {
     available_disk_category     = "cloud_essd"
     available_resource_creation = "VSwitch"
     available_instance_type     = var.instance_type
   }
   
   // Create an instance.
   resource "alicloud_instance" "instance" {
     count             = var.create_instance ? 1 : 0
     availability_zone = data.alicloud_zones.default.zones.0.id
     security_groups   = alicloud_security_group.group.*.id
     # series III
     instance_type              = var.instance_type
     system_disk_category       = "cloud_essd"
     system_disk_name           = var.name
     system_disk_description    = "test_foo_system_disk_description"
     image_id                   = var.image_id
     instance_name              = var.name
     vswitch_id                 = alicloud_vswitch.vswitch.0.id
     internet_max_bandwidth_out = 10
     password                   = var.instance_password
   }
   
   resource "alicloud_ecs_command" "command" {
     name            = "DeploydNodejs"
     type            = "RunShellScript"
     command_content = base64encode(local.command_content)
     timeout         = 3600
     working_dir     = "/root"
   }
   
   resource "alicloud_ecs_invocation" "invocation" {
     instance_id = [local.instanceId]
     command_id  = alicloud_ecs_command.command.id
     timeouts {
       create = "10m"
     }
   }
   
   data "alicloud_instances" "default" {
     count = var.create_instance ? 0 : 1
     ids   = [var.instance_id]
   }
   
   locals {
     instanceId         = var.create_instance ? alicloud_instance.instance[0].id : var.instance_id
     instance_public_ip = var.create_instance ? element(alicloud_instance.instance.*.public_ip, 0) : lookup(data.alicloud_instances.default[0].instances.0, "public_ip")
     command_content    = <<SHELL
   #!/bin/bash
   
   if [ -f /etc/os-release ]; then
       source /etc/os-release || { echo "Failed to read the /etc/os-release file"; exit 1; }
   
       if [ -z "$${ID:-}" ] || [ -z "$${VERSION_ID:-}" ]; then
           echo "The /etc/os-release file is not in the expected format or is missing required information"
           exit 1
       fi
   
       OS=$ID
       VER=$VERSION_ID
       echo "Operating system: $OS, Version: $VER"
   else
       echo "Cannot detect the OS version because the /etc/os-release file does not exist"
       exit 1
   fi
   echo "Updating system and installing necessary packages..."
   if [[ $OS == "alinux" ]]; then
   sudo yum update -y
   sudo yum install -y httpd mariadb-server mariadb php php-mysqlnd php-fpm php-xml php-gd
   sudo systemctl start httpd
   sudo systemctl enable httpd
   sudo systemctl start mariadb
   sudo systemctl enable mariadb
   sudo mysql_secure_installation <<EOF
   
   y
   Test@12345
   Test@12345
   y
   y
   y
   y
   EOF
   DB_NAME="wordpress"
   DB_USER="wordpressuser"
   DB_PASSWORD="Test@12345" # Replace with your actual password.
   mysql -u root -pTest@12345 <<EOF
   CREATE DATABASE wordpress;
   CREATE USER 'wordpressuser'@'localhost' IDENTIFIED BY 'Test@12345';
   GRANT ALL PRIVILEGES ON wordpress.* TO 'wordpressuser'@'localhost';
   FLUSH PRIVILEGES;
   EOF
   cd /var/www/html
   sudo wget https://wordpress.org/latest.tar.gz
   sudo tar -xzvf latest.tar.gz
   sudo rm latest.tar.gz
   sudo chown -R apache:apache /var/www/html/wordpress
   sudo chmod -R 755 /var/www/html/wordpress
   sudo cat <<'EOF' > /etc/httpd/conf.d/wordpress.conf
   <VirtualHost *:80>
       ServerAdmin webmaster@yourdomain.com
       DocumentRoot "/var/www/html/wordpress"
       ServerName yourdomain.com
       ServerAlias www.yourdomain.com
       <Directory "/var/www/html/wordpress">
           Options Indexes FollowSymLinks
           AllowOverride All
           Require all granted
       </Directory>
       ErrorLog "/var/log/httpd/wordpress-error.log"
       CustomLog "/var/log/httpd/wordpress-access.log" combined
   </VirtualHost>
   EOF
   
   sudo systemctl restart httpd
   elif [[ $OS == "centos" ]]; then
         yum -y update
         yum -y install epel-release
         if [[ $VER == "7" ]]; then
         yum -y install http://rpms.remirepo.net/enterprise/remi-release-7.rpm  # For CentOS 7
         elif [[ $VER == "8" ]]; then
         yum -y install http://rpms.remirepo.net/enterprise/remi-release-8.rpm  # For CentOS 8
          else
           echo "Unsupported CentOS version"
           exit 1
         fi
         yum-config-manager --enable remi-php80
         yum -y install httpd mariadb-server mariadb php php-mysqlnd php-fpm
         systemctl start httpd
         systemctl enable httpd
         systemctl start mariadb
         systemctl enable mariadb
         echo "CREATE DATABASE wordpress;" | mysql -u root
         echo "CREATE USER 'wordpressuser'@'localhost' IDENTIFIED BY 'Test@12345';" | mysql -u root
         echo "GRANT ALL PRIVILEGES ON wordpress.* TO 'wordpressuser'@'localhost';" | mysql -u root
         echo "FLUSH PRIVILEGES;" | mysql -u root
         cd /var/www/html
         curl -O https://wordpress.org/latest.tar.gz
         tar -xzvf latest.tar.gz
         rm latest.tar.gz
         chown -R apache:apache /var/www/html/wordpress
         chmod -R 755 /var/www/html/wordpress
   cat << 'EOF' > /etc/httpd/conf.d/wordpress.conf
   <VirtualHost *:80>
       ServerAdmin admin@example.com
       DocumentRoot "/var/www/html/wordpress"
       ServerName your_domain_or_IP
       ErrorLog "/var/log/httpd/wordpress-error.log"
       CustomLog "/var/log/httpd/wordpress-access.log" combined
   
       <Directory "/var/www/html/wordpress">
           Options FollowSymLinks
           AllowOverride All
           Require all granted
       </Directory>
   </VirtualHost>
   EOF
         systemctl restart httpd
   elif [[ $OS == "ubuntu" ]]; then
   # Update the system and install necessary packages.
   sudo apt update
   sudo apt install -y apache2 mariadb-server php libapache2-mod-php php-mysql php-xml php-gd
   sudo systemctl start apache2
   sudo systemctl enable apache2
   sudo systemctl start mariadb
   sudo systemctl enable mariadb
   sudo mysql_secure_installation <<EOF
   
   y
   Test@12345
   Test@12345
   y
   y
   y
   y
   EOF
   DB_NAME="wordpress"
   DB_USER="wordpressuser"
   DB_PASSWORD="Test@12345"
   mysql -u root -pTest@12345 <<EOF
   CREATE DATABASE $DB_NAME;
   CREATE USER '$DB_USER'@'localhost' IDENTIFIED BY '$DB_PASSWORD';
   GRANT ALL PRIVILEGES ON $DB_NAME.* TO '$DB_USER'@'localhost';
   FLUSH PRIVILEGES;
   EOF
   cd /var/www/html
   sudo wget https://wordpress.org/latest.tar.gz
   sudo tar -xzvf latest.tar.gz
   sudo rm latest.tar.gz
   sudo chown -R www-data:www-data /var/www/html/wordpress
   sudo chmod -R 755 /var/www/html/wordpress
   sudo cat <<'EOF' > /etc/apache2/sites-available/wordpress.conf
   <VirtualHost *:80>
       ServerAdmin webmaster@yourdomain.com
       DocumentRoot "/var/www/html/wordpress"
       ServerName yourdomain.com
       ServerAlias www.yourdomain.com
       <Directory "/var/www/html/wordpress">
           Options Indexes FollowSymLinks
           AllowOverride All
           Require all granted
       </Directory>
       ErrorLog $${APACHE_LOG_DIR}/wordpress-error.log
       CustomLog $${APACHE_LOG_DIR}/wordpress-access.log combined
   </VirtualHost>
   EOF
   sudo a2ensite wordpress.conf
   sudo a2dissite 000-default.conf
   sudo systemctl restart apache2
   fi
   
     SHELL
   }
   
   output "instance_public_ip" {
     value = "${local.instance_public_ip}"
   }
   
   output "ecs_login_address" {
     value = "https://ecs-workbench.aliyun.com/?from=EcsConsole&instanceType=ecs&regionId=${var.region}&instanceId=${local.instanceId}"
   }

2. Modify the parameters based on your needs. By default, a VPC and a pay-as-you-go ECS instance with an Ubuntu operating system are created in the China (Beijing) region. For more information about ECS billing, see Billing overview.

3. Click Start Debugging to preview the resources to be created. If the resource details are correct, click Preview and Execute to start creating the resources. The deployment is complete when the execution status shows Succeeded.

4. Verify the deployment.

   1. In a web browser, enter the following address. Replace <instance_public_ip> with the IP address from the Terraform output.

      http://<instance_public_ip>

   2. Fill in the basic website information, and then click Install WordPress.

      Parameters:

      • Site title: The name of your WordPress site. For example, wordpress.

      • User Name: The username for logging in to WordPress. Choose a secure username. For example, wordpressuser.

      • Password: The password for logging in to WordPress. Use a strong password. For example, Test@12345.

      • Your email: The email address for receiving notifications. For example, username@example.com.

   3. Click Log In.

   4. Enter the username wordpressuser and password Test@12345 that you set during the installation, and then click Log In.

      You are now logged in to your WordPress site. For more information about using WordPress, see the official WordPress documentation.