App on StackHardenhttps://stackharden.com/tags/app/Recent content in App on StackHardenStackHardenhttps://stackharden.com/og-default.pnghttps://stackharden.com/og-default.pngHugoenSat, 23 May 2026 00:00:00 +0000Privacy by Design for a New Server Buildhttps://stackharden.com/guides/privacy-by-design-server-build/Sat, 16 May 2026 00:00:00 +0000https://stackharden.com/guides/privacy-by-design-server-build/The GDPR Article 25 decisions to make before you spin up a VPS — processor selection, log minimisation, retention defaults, encryption, and deletion-readiness. The cheap time to fix privacy is now.Privacy by Design — What Every Intern Should Learn Firsthttps://stackharden.com/learner/privacy-by-design-for-interns/Sun, 17 May 2026 00:00:00 +0000https://stackharden.com/learner/privacy-by-design-for-interns/Privacy is not a compliance task you tack on later — it is a habit that shapes the code you write tomorrow morning. A field guide for early-career developers and the people mentoring them.WordPress Hosting Security Checklisthttps://stackharden.com/checklist/wordpress-security/Sat, 16 May 2026 00:00:00 +0000https://stackharden.com/checklist/wordpress-security/A pre-launch and ongoing security checklist for agencies hosting WordPress sites — server isolation, wp-config flags, admin posture, plugin discipline, backups, with NIS2 / ISO 27001 / GDPR control mapping per item.Making a Static Site Agent-Ready: What I Changed, What I Didn't, and Whyhttps://stackharden.com/guides/agent-readiness-static-site/Sat, 23 May 2026 00:00:00 +0000https://stackharden.com/guides/agent-readiness-static-site/A practitioner's walk-through of the agent-readiness signals that matter for a static content site on Hugo + Cloudflare Pages — Link headers, Content-Signal, the Markdown-for-Agents call — with the configs that shipped and the deliberate omissions.Deploying a Flask Tools Site on a Hardened VPS Behind Caddyhttps://stackharden.com/guides/deploying-flask-on-caddy/Mon, 18 May 2026 00:00:00 +0000https://stackharden.com/guides/deploying-flask-on-caddy/A faithful walkthrough of deploying a small Flask app to a single VPS — system user, gunicorn over a unix socket, systemd with the hardening directives this site recommends, Caddy as the TLS-terminating reverse proxy. Including the bumps we hit along the way.WordPress Hardening for Agencieshttps://stackharden.com/guides/wordpress-hardening/Sat, 16 May 2026 00:00:00 +0000https://stackharden.com/guides/wordpress-hardening/A WordPress hardening baseline aimed at agency hosting — server posture, wp-config flags, admin protection, plugin discipline, and the items that turn a CMS into a compliance liability if ignored.