Security headers
X-DNS-Prefetch-Control: Leave
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Cross-Origin-Resource-Policy: Leave
Cross-Origin-Opener-Policy: leave
Cross-Origin-Embedder-Policy: leave
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Content-Security-Policy: Leave
Content-Security-Policy-Report-Only: Leave
Expect-CT: Leave
Permissions-Policy: Leave
Rough moving notes - With Duplicator plugin
Notes for this here: https://holocron.somersetwebservices.co.uk/uncategorised/use-cloudflare-ssl-on-20i-package/
This will make the website whitescreen without it
Copy the keys from wp-salt.php and add that to the correct place in the wp-config file ( where it includes wp-salt.php )
Check 20i hasn’t added its own keys
Delete wp-salt.php and then check if 20i can recognise the website as wordpress