WordPress on Ubuntu 24.04 LTS

What's included

• WordPress installed from the official upstream source
• Ubuntu 24.04 LTS base with automatic security updates enabled
• No shared or default passwords — a unique admin credential is generated on your VM at first boot
• Trusted Launch support: Secure Boot + vTPM
• Azure Monitor Agent, Defender for Cloud, and Update Manager install cleanly

Quick start

1. Deploy from the Azure Marketplace (Get It Now → Create), choosing your SSH key at the Administration step.
2. Allow inbound SSH (22) for yourself plus the application port(s) in the Network Security Group (NSG): 80 (HTTP), and 443 once you have added a certificate — restrict to your own IP where possible. The VM's own firewall (ufw) is installed but NOT enabled on this image, so the NSG is the only filter in front of the VM.
3. Open http://<VM-IP>/wp-admin/ and sign in as admin (see First login below).
4. Turn on HTTPS — it is not on out of the box: the image serves plain HTTP on port 80 only, and neither certbot nor mod_ssl is installed. Point your domain's DNS at the VM and run `sudo wordpress-set-site-url your.domain`; set `ServerName your.domain` in /etc/apache2/sites-available/wordpress.conf and `sudo systemctl reload apache2`; then `sudo apt install certbot python3-certbot-apache` and `sudo certbot --apache -d your.domain` (port 80 must be reachable, because certbot proves the domain over HTTP), and allow 443 in the NSG.
5. To make WordPress itself use https:// addresses, first stop the every-boot address refresh — `sudo systemctl disable wordpress-site-url.service` — because on this image it writes the address back as http:// at boot (read from the image's script, not separately tested); then change both addresses in Settings → General to https://your.domain.

Get your admin password (one time)

ssh <your-username>@<VM-IP>
sudo cat /root/wordpress-admin-credentials.txt

Every image ships without any shared or default password — a unique admin credential is generated for your VM on first boot. Change it after first sign-in.