I'm working on a modern and secure website for a medium-sized support group, and I need some feedback on my tech stack setup. Here are the requirements for the site: it should be content-focused with articles, topics, and categories, have about three authors with an intuitive content management UI, and not involve visitor logins or personal data storage. Security is a top priority, and I want to avoid common exploits like those seen with WordPress.
Here's my proposed tech stack:
**Backend:** Directus as the admin panel, with a REST API hosted on Fly.io.
**Database:** LiteSQL/MySQL, also hosted on Fly.io (I dropped the idea of PostgreSQL).
**Frontend:** Astro for static site generation, hosted on Vercel.
I'm also considering using GitHub for easy deployment. Is this a solid setup or am I missing the mark?
2 Answers
WordPress can be fine if you keep it updated and avoid untrusted plugins, especially with managed hosting taking care of things.
Regarding PostgreSQL, you probably don't need its features for a site like yours, but it could still work well. My take: if you're concerned about security, maybe steer clear of WordPress altogether.
I feel similarly about WordPress being a potential target, especially since it's so common. There are forums discussing new exploits regularly—it makes you vulnerable if you use it without caution.
There's a ton of options out there; many tech stacks can be secure and scalable. For new projects, I personally lean towards using Next.js on Vercel for both frontend and backend, along with Supabase.
Also, what's the purpose of the admin panel? If you're the only developer, editing content directly in the code might be simpler. But it’s good for collaborators, especially if they're not tech-savvy.
The admin panel is specifically for managing things like articles and categories, since my authors aren’t really familiar with markdown.
Thanks for your input!