vmassuchetto

This is a plugin for managing website releases under production or development 
environments. Once the WordPress installation is in a Git tree, WP Deploy will 
detect its branches and put a switch menu in the admin bar.
Like this, you can just push your website to your remote and use the menu to 
deploy the changes without using Git hooks or prompting into another shell.
Another useful purpose is for the development process, where different 
implementations can be viewed and switched by customers, or a production branch 
can be testes in a staging environment.

WP Git Deploy

Deploy websites using Git and the admin bar.

Gunjan Jaswal

StaticForge for Cloudflare Pages turns your WordPress site into a static site that lives on Cloudflare Pages, automatically. On every publish or update of any selected post type, the plugin renders your whole site to static HTML, injects a complete SEO metadata baseline (when no other SEO plugin is present), inlines all linked CSS so pages are self-contained, mirrors your sitemap structure, ships an editable <code>robots.txt</code>, and pushes everything to Cloudflare Pages via the Direct Upload API.
The WordPress install (your “dashboard”) becomes the editor only. Public visitors hit the static deployment on Cloudflare’s edge — fast, free, and resilient.
<h4>Key features</h4>
<ul>
<li>Whole-site export — homepage, posts, pages, custom post types, taxonomy archives, author archives.</li>
<li>Theme-independent — works with any theme. Renders pages exactly as a real visitor would see them.</li>
<li>Inlined CSS — all <code><link rel="stylesheet"></code> tags are fetched and embedded as <code><style></code> blocks. Each deployed page is fully self-contained.</li>
<li>Featured image LCP boost — auto-adds <code>fetchpriority="high"</code>, <code>loading="eager"</code>, <code>decoding="async"</code> to the post’s featured image so the browser prioritises it as the LCP candidate. Improves Core Web Vitals on every theme that uses <code>the_post_thumbnail()</code> or <code>get_the_post_thumbnail()</code>.</li>
<li>Built-in SEO metadata injection — when no other SEO plugin is detected, automatically emits a full baseline:
<ul>
<li><code><meta description></code> — smart fallback chain (excerpt → trimmed content → user bio → term description → site tagline).</li>
<li><code><meta robots></code> with <code>index, follow, max-image-preview:large</code> and friends.</li>
<li><code><link rel="canonical"></code>.</li>
<li>Open Graph: <code>og:type</code>, <code>og:title</code>, <code>og:description</code>, <code>og:url</code>, <code>og:site_name</code>, <code>og:locale</code>, <code>og:image</code> with dimensions and alt; <code>article:published_time</code>, <code>article:modified_time</code>, <code>article:author</code>, <code>article:section</code>, <code>article:tag</code> on posts; <code>profile:first_name</code>, <code>profile:last_name</code>, <code>profile:username</code> on author pages.</li>
<li>Twitter Card — <code>summary_large_image</code> when an image is available, otherwise <code>summary</code>; title, description, image, creator.</li>
</ul>
</li>
<li>Rich JSON-LD schemas — auto-emitted in <code><head></code>:
<ul>
<li><code>WebSite</code> + <code>SearchAction</code>, <code>Organization</code> on every page.</li>
<li><code>Article</code> with linked <code>author</code> Person, <code>publisher</code> Organization, image, dates, articleSection, keywords on single posts.</li>
<li><code>WebPage</code> with <code>primaryImageOfPage</code> on pages and custom post types.</li>
<li><code>Person</code> + <code>ProfilePage</code> schema on author archives — display name, URL, bio, avatar <code>ImageObject</code> (256×256), <code>sameAs</code> social links pulled from <code>user_url</code> and Twitter/Facebook/LinkedIn/Instagram/YouTube/GitHub user meta.</li>
<li><code>CollectionPage</code> for taxonomy and term archives.</li>
<li><code>BreadcrumbList</code> on all singulars and archives.</li>
<li>Auto-detected <code>FAQPage</code> — extracts Q/A pairs from Yoast / Rank Math / SEOPress FAQ blocks, OR native HTML5 <code><details><summary></code> markup.</li>
<li>Auto-detected <code>HowTo</code> — extracts steps from Yoast / Rank Math HowTo blocks, OR posts whose title starts with “How to” + has an ordered list with 3+ items.</li>
</ul>
</li>
<li>Two-tier dedup safety — auto-disables to avoid duplicates:
<ul>
<li>General SEO plugins (skip ALL our injection): Yoast, Rank Math, All in One SEO Pack (v4+ & legacy), SEOPress, The SEO Framework, Slim SEO, Squirrly, SmartCrawl, WP Meta SEO.</li>
<li>Schema-only plugins (skip ONLY our JSON-LD; meta + og still emit): Schema & Structured Data for WP & AMP (saswp by Magazine3), Schema Pro by Brainstorm Force, WPSSO Core, Schema (by Hesham), Schema App, and Magazine3 Schema variants.</li>
<li>Override via setting or filters (<code>sforge_seo_competing_plugin</code>, <code>sforge_schema_competing_plugin</code>).</li>
</ul>
</li>
<li>Sitemap mirroring + fallback generation — discovers <code>/sitemap.xml</code>, <code>/sitemap_index.xml</code>, <code>/wp-sitemap.xml</code>, follows index files, fetches child sitemaps, handles CDATA-wrapped <code><loc></code> entries, rewrites origin URLs to your live domain (including protocol-relative <code>//host</code> variants), and strips <code><?xml-stylesheet ... ?></code> directives so the dashboard host doesn’t leak into browser-rendered sitemap views. Bundles them all in the deploy. When the origin exposes no sitemap (no SEO plugin, WP core sitemap disabled, sub-directory install with non-standard paths, etc.), the plugin builds a standards-compliant <code><urlset></code> <code>sitemap.xml</code> itself from the crawled URL list — with <code><lastmod></code> resolved from <code>get_post_modified_time()</code>, <code><changefreq>weekly</changefreq></code>, and <code><priority></code> (1.0 home / 0.7 elsewhere). Live site always ships a sitemap.</li>
<li>Granular sitemap generator settings — when the fallback runs, you control exactly what gets listed: per-public-post-type checkboxes, include/exclude homepage, taxonomy archives, author archives, and an option to split the output into a <code><sitemapindex></code> referencing per-type sub-sitemaps (<code>sitemap-post.xml</code>, <code>sitemap-page.xml</code>, <code>sitemap-authors.xml</code>, <code>sitemap-taxonomy-category.xml</code>, etc.) for cleaner Search Console submission. Independent of Export Scope. Filter <code>sforge_sitemap_groups</code> to mutate the URL list.</li>
<li>Editable robots.txt for the live site with auto-managed Sitemap: line — leave blank to auto-generate, or paste your own <code>Allow:</code> / <code>Disallow:</code> rules. Any <code>Sitemap:</code> directive you type is stripped and replaced with the URL of the actually-deployed sitemap (<code>sitemap.xml</code> / <code>sitemap_index.xml</code> / <code>wp-sitemap.xml</code> / etc.) so robots.txt never points at a dead URL. Independent of the dashboard’s own robots.txt.</li>
<li>Dashboard auto-noindex on activation (social-aware) — when the plugin activates it locks the WordPress install out of search engines (so editors only ever appear via the static deployment). Social/messaging/preview scrapers (Facebook, LinkedIn, Twitter/X, Pinterest, WhatsApp, Slack, Discord, Telegram, Applebot, Reddit, Tumblr, Mastodon, Bluesky, iframely, Embedly) are explicitly allowed <code>/wp-content/uploads/</code> so og:image previews and oEmbed thumbnails still resolve when a post is shared. Four enforcement layers, all bypassed when the plugin’s own renderer fetches a page (detected via <code>X-SFORGE-Export</code> header), and additionally bypassed for social-scraper user agents and <code>/wp-content/uploads/</code> requests:
<ol>
<li>Physical <code>robots.txt</code> at webroot with <code>Disallow: /</code> (any existing file is backed up to <code>robots.txt.sforge-backup</code> and restored on deactivation).</li>
<li><code>robots_txt</code> WordPress filter for the dynamic fallback.</li>
<li><code>wp_robots</code> filter adding <code>noindex,nofollow</code> to the meta robots tag.</li>
<li><code>send_headers</code> action emitting <code>X-Robots-Tag: noindex, nofollow, noarchive, nosnippet</code> HTTP header on every response. 
Toggle via the Block dashboard from search engines setting (default on); flipping the toggle applies/restores the physical robots.txt instantly.</li>
</ol>
</li>
<li>Defensive noindex stripping — removes <code>noindex</code> / <code>nofollow</code> / <code>noarchive</code> directives from rendered HTML before deploy, so your live site stays indexable even if the source dashboard is locked down.</li>
<li>Auto-deploy on publish/update — debounced (default 120s) so rapid edit clusters collapse into one deploy.</li>
<li>Cloudflare Pages Direct Upload — no Git integration required. Uses the official content-addressable upload API: only changed assets are re-uploaded across deploys.</li>
<li>Live progress UI — activity log auto-refreshes every 4 seconds with batch-by-batch upload progress, render percentages, and a status pill (Idle / Queued / Working).</li>
<li>Setup Guide built in — full walk-through for Cloudflare Pages project creation, API token setup, and plugin configuration, all inside WP admin.</li>
</ul>
<h4>How it works</h4>
<ol>
<li>On publish/update, plugin queues a full-site rebuild via <code>wp_schedule_single_event</code>.</li>
<li>Crawler builds URL list (homepage + all published posts/pages of selected types + taxonomy term archives + author archives).</li>
<li>SEO injector hooks into <code>wp_head</code> and emits meta + JSON-LD for the rendering page (skipped if another SEO plugin is active).</li>
<li>Renderer fetches each URL via <code>wp_remote_get</code>, inlines CSS, rewrites origin URLs to your live domain, strips defensive noindex meta and admin-bar artefacts.</li>
<li>SEO module discovers and mirrors <code>/sitemap.xml</code>, <code>/sitemap_index.xml</code>, <code>/wp-sitemap.xml</code> and any child sitemaps; if none found, auto-generates <code>sitemap.xml</code> from the crawled URL list. Emits the configured <code>robots.txt</code>.</li>
<li>Deployer hashes each file, asks Cloudflare which assets are new, uploads only the new ones in batches (100 files / 25 MiB each), then creates a deployment via multipart/form-data.</li>
<li>Result: a new Cloudflare Pages deployment URL, logged with a clickable link.</li>
</ol>
<h4>What is NOT bundled</h4>
By default, files under <code>/wp-content/uploads/</code>, theme assets, plugin assets, and fonts under <code>/wp-content/</code> are kept pointing at your WordPress origin so they keep working without re-uploading multi-gigabyte media folders. Make sure your origin is reachable over HTTPS (proxy through Cloudflare if your origin’s SSL cert is fragile).
If your origin can’t be reached from Cloudflare (shared hosting firewall, IP allow-list, no proxy option), enable Export Scope → Bundle <code>/wp-content/uploads/</code> into deploy. The plugin then fetches every uploads URL referenced in the rendered HTML and ships those files inside the CF Pages deploy itself — no origin dependency at runtime. Theme/plugin assets still load from origin. See the Bundle <code>/wp-content/uploads/</code> (recommended for shared hosting) section below.
<h4>Why this plugin</h4>
<ul>
<li>Simpler scope — Cloudflare Pages only, Direct Upload only.</li>
<li>Built-in setup walkthrough, no docs hunting.</li>
<li>Live progress UI with granular per-batch logging.</li>
<li>Free tier compatible — no build minutes consumed.</li>
<li>SEO baseline included — no extra plugin needed for tags + JSON-LD.</li>
<li>No external dependencies, no SaaS, no premium tier.</li>
</ul>
<h3>External services</h3>
This plugin connects to the Cloudflare Pages API (<code>https://api.cloudflare.com/client/v4</code>) to deploy your exported static site. This is required core functionality — without it the plugin cannot upload your site to Cloudflare.
What the service is and what it is used for: 
Cloudflare Pages is a static site hosting platform operated by Cloudflare, Inc. The plugin uses the Cloudflare Pages Direct Upload API to publish your statically rendered WordPress site to a Cloudflare Pages project that you create and own.
What data is sent, and when: 
The plugin contacts the Cloudflare Pages API on these occasions:
<ul>
<li>When you click Test Connection in the plugin settings. Sent: your Cloudflare API token (in the <code>Authorization</code> header), your Account ID, and your Pages project slug. Used to verify the project exists and the token has access.</li>
<li>When you click Rebuild + Deploy Now, or after any post/page/CPT publish/update if Auto-deploy is enabled (debounced). The plugin: (1) requests a short-lived upload JWT from <code>/pages/projects/{project}/upload-token</code>; (2) sends a list of SHA-256 hashes of the files in the export to <code>/pages/assets/check-missing</code> to find which files Cloudflare does not already have; (3) uploads only the missing assets (HTML, CSS, JS, images, sitemap.xml, robots.txt) to <code>/pages/assets/upload</code>; (4) POSTs a final deployment manifest + branch name to <code>/pages/projects/{project}/deployments</code>. All requests include your API token in the <code>Authorization: Bearer</code> header.</li>
</ul>
What is NOT sent: the plugin never sends WordPress database credentials, user passwords, post drafts, private content, settings beyond the four Cloudflare credentials, or any analytics/telemetry beacons. Only the rendered public HTML/CSS/JS/asset files that already make up your site are uploaded — the same content visitors would see.
Cloudflare Pages service links:
<ul>
<li>Cloudflare Pages product page: <a href="https://pages.cloudflare.com/" rel="nofollow ugc">https://pages.cloudflare.com/</a></li>
<li>Cloudflare API documentation: <a href="https://developers.cloudflare.com/api/" rel="nofollow ugc">https://developers.cloudflare.com/api/</a></li>
<li>Cloudflare Terms of Service: <a href="https://www.cloudflare.com/website-terms/" rel="nofollow ugc">https://www.cloudflare.com/website-terms/</a></li>
<li>Cloudflare Self-Service Subscription Agreement (covers Workers & Pages): <a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">https://www.cloudflare.com/terms/</a></li>
<li>Cloudflare Privacy Policy: <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">https://www.cloudflare.com/privacypolicy/</a></li>
</ul>
You retain full ownership and control of your Cloudflare account, Pages project, API token, and deployed content. To stop using the service, revoke the API token in your Cloudflare dashboard and deactivate the plugin.
<h3>About</h3>
Built by <a href="https://www.gunjanjaswal.me" rel="nofollow ugc">Gunjan Jaswal</a>. Bug reports, feedback: hello@gunjanjaswal.me.

StaticForge for Cloudflare Pages

Auto-export WordPress as static HTML to Cloudflare Pages on publish — with SEO meta, JSON-LD schemas, sitemaps, and robots.txt.

WP Git Deploy vs StaticForge for Cloudflare Pages