Everything that matters.
SETUP
One database per application One user per database, with all privileges A generated password, recorded with the site documentation The configuration file confirmed unreachable over HTTP Remote access off unless needed
BACKUPS
Automatic, at a frequency matching what you can afford to lose Stored off the server
Verified: plausible size, ending cleanly
Restore-tested at least once
MAINTENANCE
- Monthly: check size, clear transients and spam, confirm backups
- Quarterly: review largest tables, clean revisions, optimise
- Annually: remove unused databases, review indexes
PERFORMANCE
Page caching enabled Autoloaded data checked, on WordPress Slow queries identified and indexed Queries per page within reason
BEFORE ANY DIRECT CHANGE
Export the table SELECT before UPDATE or DELETE Confirm which database is selected
DOCUMENTATION
Which database belongs to which site, and which user Kept off the server
THE THREE THAT MATTER MOST
Back up before changes. SELECT before you write. Store backups off the server.
