What good looks like.
DNS
Root domain and www: proxied
Mail hostname and MX: DNS only
cPanel, FTP and service hostnames: DNS only SPF, DKIM, DMARC and verification TXT records: present and correct
SSL
Mode: Full (strict)
Always Use HTTPS: on
AutoSSL valid at our end, covering every domain and subdomain
CACHING
Caching level: Standard
Browser cache TTL: a few days to a month
Server-side caching enabled on our end
OPTIMISATION
- Brotli: on
- Rocket Loader: off
- Minification: off if your caching plugin already does it
SECURITY
Security level: Medium
A rule challenging requests to the login path Bot fight mode considered, with search engine crawlers allowed
RULES
Bypass cache for admin, cart, checkout and account paths Allow payment gateway callbacks
WHAT TO TEST AFTERWARDS
The site, mail both ways, cPanel access, checkout, and a payment callback.
