WordPress on App Service: Frequently Asked Questions

Are there limits on the number of sites, visits, storage, or bandwidth?

The allocated resources for an App Service plan and database tier determine the hosting capacity. For example:

• App Service B1 Plan: Includes one core, 1.75-GB RAM, and 10-GB storage.
• Database B1ms Instance: Offers 1 vCore, 2-GB RAM, and storage up to 16 GB.

There's no fixed limit on the number of sites you can host, but recommended app limits by pricing tier are:

Bandwidth is unlimited, but charges apply for internet egress.

How are security patches updated?

WordPress on Azure App Service is a partially managed hosting offering. Microsoft manages the App Service platform, including patching the underlying operating system and PHP runtime. App Service platform updates don't update or overwrite the WordPress files in an existing site.

You're responsible for the following updates:

• PHP major version: Select and upgrade the PHP major version when needed under App Service > Settings > Configuration.
• WordPress core: Keep WordPress core secure and up to date. Some core updates might be applied automatically, depending on your configuration. Verify that updates are applied, and update WordPress core when needed. For more information about automatic updates, see How to keep your WordPress website stack on Azure App Service up to date.
• Plugins and themes: Keep plugins and themes secure and up to date, either manually or by configuring automatic updates in WordPress. Back up your site before applying updates.

What security features are available to protect my website?

Azure App Service integrates robust security features to safeguard WordPress sites:

• App Service Security: HTTPS, IP restrictions, certificates, authentication, and network isolation.
• Easy Authentication: Built-in identity provider integration with minimal effort.
• Azure Database for MySQL: Advanced protections for Azure MySQL servers, including encryption and backup capabilities.
• Virtual Network (VNET): Secure communication between Azure resources, the internet, and on-premises networks.
• Managed Identities: Credential-free access to resources using Microsoft Entra tokens.
• Microsoft Defender for Cloud: Proactive threat detection with DevSecOps integration.
• Azure Key Vault: Secure storage for keys, secrets, and certificates.
• Microsoft Entra ID: Single sign-On (SSO) for seamless authentication.

How can I set up WordPress Multisite?

WordPress Multisite allows managing multiple sites from a single installation. To enable: Set up a subdirectory-based Multisite or subdomain-based Multisite.

How do I access my WordPress website's database?

The database can be accessed using phpMyAdmin at: https://<your-site-link>/phpmyadmin. Use the DATABASE_USERNAME as the username and a generated token as the password (tokens can be retrieved via Kudu SSH).

How do I enable a custom domain for my WordPress website?

Custom domains can be set up with these resources:

• Using custom domains with WordPress on Azure App Service
• Configuring custom domains with Azure Front Door

Does WordPress on App Service have email functionality?

Yes, email functionality is supported through Azure Communication Services. Custom email domains can be also be configured.

How can I update NGINX configurations for my WordPress website?

NGINX configurations can be updated using a startup script. Detailed instructions are available in the startup script guide.

How can I access error logs for my WordPress website?

Access error logs for debugging via App Service logs or the Kudu dashboard. Refer to the documentation for detailed steps.

How do I estimate pricing for hosting a WordPress site on Azure?

Use the Azure Pricing Calculator to estimate hosting costs, considering App Service, MySQL, Azure Front Door, Blob Storage, and other components. For more information, use this pricing estimate guide.

How can I debug and monitor my WordPress site?

Key tools for debugging and monitoring WordPress sites include:

• App Service Logs
• Kudu
• SSH Access

PhpMyAdmin

WordPress on App Service utilizes an Azure Database for MySQL Flexible Server, which is integrated into a virtual network. This setup restricts database access to within the virtual network. WordPress on App Service includes phpMyAdmin by default. You can access it at: https://<your-site-link>/phpmyadmin.

If you're using Managed Identities, you can sign in to phpMyAdmin by using the value from the DATABASE_USERNAME environment variable as the username and the token as the password. To find the token, use your Kudu SSH to run the following command:

/usr/local/bin/fetch-mysql-access-token.sh

Or you can find the database username and password from App Service environment variables.

What features can I use to boost my WordPress site's performance?

Enhance performance with these features / plugins:

• Azure Front Door (AFD)
• Blob Storage
• Dynamic Caching
• Image Compression (Smush)
• Scaling Up and Out
• Redis Cache

What are the options for configuring and setting up my WordPress site?

Options for setting up WordPress include:

• FTP File Transfers
• NGINX Configuration Updates
• App Service settings

How can I build a headless WordPress site?

Enable WP REST APIs and integrate with Static Web Apps to create a decoupled front-end experience. Learn more here.

What features are available for creating an enterprise-grade production website?

Key features include:

• Staging slots for safe testing.
• Custom domains.
• CI/CD pipelines for automated deployments.
• Startup scripts for configuration.
• Emails with custom domain.
• Scaling and load testing capabilities.

What are common errors for WordPress on App Service, and how can I troubleshoot?

Typical issues and resolutions:

• Debug Logs: Enable for troubleshooting.
• CORS Issues: Adjust settings in Azure Front Door.
• Existing WordPress Detected Warning:
• Intl Extension issues: Install via the configuration panel.