Git per WordPress: versionare temi, plugin e configurazioni senza caos

# .gitignore per WordPress

# 1. Il core di WordPress — non versionarlo, si reinstalla
/*
!wp-content/
!.gitignore
!README.md

# 2. Dentro wp-content, versionare solo il nostro lavoro
wp-content/*
!wp-content/themes/
!wp-content/plugins/
!wp-content/mu-plugins/

# 3. Temi: ignora i temi di terze parti, versionare solo il child theme
wp-content/themes/*
!wp-content/themes/mio-child-theme/

# 4. Plugin: ignora i plugin di terze parti, versionare solo i custom
wp-content/plugins/*
!wp-content/plugins/mio-plugin-custom/

# 5. MU plugin: versionare (sono quasi sempre custom)
# (già incluso sopra)

# 6. Upload: MAI nel repo (binari, pesanti, no diff)
wp-content/uploads/

# 7. File sensibili: MAI nel repo
wp-config.php
.htaccess
*.log
*.sql
*.zip

# 8. File di sistema
.DS_Store
Thumbs.db
node_modules/

# 9. Cache e temporanei
wp-content/cache/
wp-content/upgrade/
wp-content/backup*

<?php
// wp-config.php — versione sicura per Git

// Configurazioni base (uguali per tutti gli ambienti)
define( 'DB_CHARSET', 'utf8mb4' );
define( 'DB_COLLATE', '' );

// Configurazioni specifiche per ambiente (dal file locale)
if ( file_exists( __DIR__ . '/wp-config-local.php' ) ) {
    require_once __DIR__ . '/wp-config-local.php';
} else {
    // Fallback per produzione se il file locale non esiste
    define( 'DB_NAME', getenv( 'DB_NAME' ) ?: 'wordpress' );
    define( 'DB_USER', getenv( 'DB_USER' ) ?: 'root' );
    define( 'DB_PASSWORD', getenv( 'DB_PASSWORD' ) ?: '' );
    define( 'DB_HOST', getenv( 'DB_HOST' ) ?: 'localhost' );
}

// Chiavi di sicurezza (genera su https://api.wordpress.org/secret-key/1.1/salt/)
define( 'AUTH_KEY',         getenv( 'AUTH_KEY' ) ?: '...' );
define( 'SECURE_AUTH_KEY',  getenv( 'SECURE_AUTH_KEY' ) ?: '...' );
// ... (tutte le 8 chiavi)

$table_prefix = 'wp_';

define( 'WP_DEBUG', false );

if ( ! defined( 'ABSPATH' ) )
    define( 'ABSPATH', __DIR__ . '/' );

require_once ABSPATH . 'wp-settings.php';

// wp-config-local.php (IGNORATO da Git, diverso per ogni ambiente):
// <?php
// define( 'DB_NAME', 'wordpress_dev' );
// define( 'DB_USER', 'root' );
// define( 'DB_PASSWORD', 'password_locale' );
// define( 'DB_HOST', 'localhost' );
// define( 'WP_DEBUG', true );
// define( 'WP_DEBUG_LOG', true );
// define( 'WP_DEBUG_DISPLAY', true );

# .github/workflows/deploy.yml — deploy WordPress via SSH
name: Deploy to Production

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install SSH key
        run: |
          mkdir -p ~/.ssh
          echo '${{ secrets.SSH_PRIVATE_KEY }}' > ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa
          ssh-keyscan ${{ secrets.SERVER_HOST }} >> ~/.ssh/known_hosts

      - name: Deploy via SSH
        run: |
          ssh ${{ secrets.SSH_USER }}@${{ secrets.SERVER_HOST }} << 'EOF'
            cd /var/www/html/wp-content/themes/mio-child-theme
            git pull origin main
            # Svuota la cache se necessario
            wp cache flush --allow-root 2>/dev/null || true
          EOF

      - name: Notify
        if: always()
        run: echo 'Deploy completato'