Disable Cron job on Wordpress
Cloudflare
Setup BASIC auth for sensitive admin pages
Update wp-config.php to read from env vars
CloudFlare X-Forwarded-For support
HttpStubStatusModule support. See /nginx_status