Trusted Images - WordPress Nginx on Ubuntu 22.04 LTS AMI

This AMI is maintained by Trusted Images and includes open source software packages for the target operating system.

WordPress on Ubuntu 22.04 LTS with Nginx - hardened CMS AMI with Trusted Images email support

Trusted Images packages WordPress on Ubuntu 22.04 LTS for AWS buyers who want a maintained WordPress AMI with an Nginx/PHP-FPM serving layer, documented hardening records, monthly patch rebuilds, and defined support boundaries for image-specific questions.

What is included:

• Ubuntu 22.04 LTS x86_64 AMI with a 30 GB gp3 root volume.
• WordPress release archive downloaded from wordpress.org and verified with a pinned SHA256.
• Ubuntu-packaged Nginx and PHP-FPM runtime with required WordPress PHP extensions.
• PHP MySQL client extension for setup flexibility. This image does not install or configure a database server.
• Nginx configuration that serves WordPress under /wordpress and restricts setup entrypoints to local requests.
• Local release metadata and evidence helper files installed under /etc/trusted-images and /usr/local/sbin.

Security hardening:

• The AMI configuration requires IMDSv2 and HTTP metadata tokens.
• SSH root login and SSH password authentication are disabled by the common hardening role.
• Kernel and network sysctl hardening is applied during provisioning.
• Nginx and PHP-FPM are configured for WordPress with the release files present, local HTTP endpoints available, and no wp-config.php file baked into the image.
• This image does not install TLS certificates, Certbot, UFW rules, a WordPress administrator account, database credentials, or a separate CMS data volume. Configure HTTPS, public access, authentication policy, backups, database access, and EC2 security groups deliberately for your workload.

Patch and rebuild cadence:

• The image is rebuilt monthly after upstream package updates and can be rebuilt sooner for urgent security fixes.
• Supported AMI versions include source scan output, runtime hardening checks, root filesystem scan results, package inventory, and SBOM data.

Support process:

• Support includes launch assistance, WordPress release guidance, patch notifications, and issue triage.
• For support, contact support@trusted-images.com  or visit https://trusted-images.com/support .
• Support does not include custom site design, custom plugins, authentication integrations, backups, or managed continuous operations.

Evidence and SBOM availability:

• Trusted Images retains service validation records, source scan output, root filesystem scan results, hardening status, package inventory, and CycloneDX SBOM data for supported AMI versions.
• SBOM and scan evidence can be provided through Trusted Images support for the published AMI version.

Getting started:

• Launch from AWS Marketplace with an x86_64 EC2 instance type sized for your workload.
• Connect as the default Ubuntu AMI user: ubuntu.
• Review /etc/trusted-images/wordpress-readme.txt and /etc/trusted-images/release after launch.
• Use an SSH tunnel to complete the local-only setup workflow, for example forward local port 8080 to the instance HTTP port and browse to /wordpress/wp-admin/setup-config.php through the tunnel.
• Connect WordPress to your chosen MySQL-compatible database, complete site-specific setup, then configure HTTPS and public access only after setup is complete.

No upstream affiliation:

• WordPress is open source software. Trusted Images is not affiliated with, endorsed by, or sponsored by the WordPress project, WordPress Foundation, or its maintainers.