WordPress is powerful, but a public WordPress install is also a standing security liability: core, themes and plugins all need constant patching, and a single missed update can mean a compromise.
We wanted the convenience of an admin without the exposure of a live application. The answer is a static-site generator paired with a Git-based CMS:
- We write content in a friendly editor.
- The editor saves Markdown into a Git repository.
- A build step turns that into static HTML.
- The HTML is served behind Cloudflare.
The public site has no moving parts. The editor is separate and can be locked behind authentication or a VPN. That is the model this site now uses.