A new hosting account requires careful setup before publishing your website. Proper settings from the start reduce the risk of crashes, data loss and security issues.
Adding a domain and DNS
First, add a domain in the hosting panel and point the appropriate DNS records to it. You can change name servers or leave the zone with your current operator and set the appropriate A, AAAA or CNAME records. Separate MX records route mail.
DNS changes may become visible gradually. During this time, some users may still go to the previous server. When migrating, it is a good idea to leave the old environment active until propagation is complete.
SSL certificate
After pointing your domain, you must enable the SSL certificate and enforce secure HTTPS. You need to check the home page, subpages, forms and resources to exclude references to insecure addresses.
Files and database
Page files are placed in the directory assigned to the domain. Applications like WordPress also use a database. You should create a separate database user, give him only the required permissions and save the data in a safe place.
File permissions should not be wider than necessary. It is worth assigning SFTP access or the file panel individually. Temporary accounts should be limited in scope and have a specific deletion date.
Mail and automatic tasks
If your hosting supports email, you need to create mailboxes and configure SPF, DKIM and DMARC records. Periodic tasks, called Cron, should be set in accordance with the application documentation and their execution monitored.
Backups and monitoring
- Enable automatic copies of files and databases.
- Check the frequency of backups and their retention time.
- Keep an additional copy off the main server.
- Perform a trial restore to confirm the usability of the backup.
- Start monitoring the availability and validity of the certificate.
Check before publication
Finally, it is worth checking the PHP version, resource limits, form operation, mail sending, redirections, certificate and backups. You should also delete unused accounts, change passwords provided to contractors, and register people responsible for the domain, hosting and application.
