View a markdown version of this page

Configure WordPress with a Lightsail content delivery network - Amazon Lightsail

Configure WordPress with a Lightsail content delivery network

This blueprint packaged by Bitnami is being deprecated

Blueprints packaged by Bitnami will no longer receive updates after May 19, 2026. Starting November 19, 2026, you will no longer be able to create new instances with this blueprint. When creating new instances, we recommend using the equivalent Lightsail blueprint if available. Existing instances using blueprints packaged by Bitnami will continue to run without any disruption. Learn more

If you have an existing instance that uses a blueprint packaged by Bitnami and want to migrate to a Lightsail-packaged blueprint, see Migrate to Lightsail blueprints.

This tutorial applies to instances that use WordPress packaged by Bitnami only

If your instance uses the WordPress blueprint packaged by Lightsail, see WordPress instead.

In this guide, we show you how to configure your WordPress instance to work with an Amazon Lightsail distribution.

All Lightsail distributions have HTTPS enabled by default for their default domain (for example, 123456abcdef.cloudfront.net). The configuration of your distribution determines whether the connection between your distribution and your instance is encrypted.

  • Your WordPress website uses HTTP only – If your website uses HTTP only as the origin of your distribution, and it is not configured to use HTTPS, you can configure your distribution to terminate SSL/TLS and forward all content requests to your instance using an unencrypted connection.

  • Your WordPress website uses HTTPS – If your website uses HTTPS as the origin of your distribution, you can configure your distribution to forward all content requests to your instance using an encrypted connection. This configuration is known as end-to-end encryption.

Step 1: Complete the prerequisites

Before you get started, make sure your WordPress instance is in a running state. For more information, see Start, stop, or restart your instance.

Step 2: Create the distribution

Complete the following steps to configure a Lightsail distribution for your WordPress instance. For more information, see Create a Lightsail content delivery network distribution.

To create a distribution for your WordPress instance
  1. In the left navigation pane, choose Networking.

  2. Choose Create distribution.

  3. For Choose your origin, choose the Region where you're running your WordPress instance and then choose your WordPress instance. We automatically use the static IP address that you attached to the instance.

  4. For Caching behavior, choose Best for WordPress.

  5. (Optional) To configure end-to-end encryption, change the origin protocol policy to HTTPS only. For more information, see Origin protocol policy.

  6. Configure the remaining options and then choose Create distribution.

  7. On the Custom domains tab, choose Create certificate. Enter a unique name for the certificate, enter the names of your domain and subdomains, and then choose Create certificate.

  8. Choose Attach certificate.

  9. For Update DNS records, choose I understand.

Step 3: Update DNS records

Complete the following steps to update the DNS records for your Lightsail DNS zone.

To update the DNS records for your distribution
  1. In the left navigation pane, choose Domains & DNS.

  2. Choose your DNS zone and then choose the DNS records tab.

  3. Delete the A and AAAA records for the domain that you specified in your certificate.

  4. Choose Add record and create a CNAME record that resolves your domain to the domain for your distribution (for example, d2vbec9EXAMPLE.cloudfront.net).

  5. Choose Save.

Step 4: Allow static content to be cached by the distribution

Complete the following procedure to edit the wp-config.php file in your WordPress instance so that it works with your distribution.

Note

We recommend that you create a snapshot of your WordPress instance before getting started with this procedure. The snapshot can be used as a backup from which you can create another instance in case something goes wrong. For more information, see Create a snapshot of your Linux or Unix instance.

  1. Sign in to the Lightsail console.

  2. In the left navigation pane, choose the browser-based SSH client icon that is displayed next to your WordPress instance.

  3. After you're connected to your instance, enter the following command to create a backup of the wp-config.php file. If something goes wrong, you can restore the file using the backup.

    sudo cp /opt/bitnami/wordpress/wp-config.php /opt/bitnami/wordpress/wp-config.php.backup
  4. Enter the following command to open the wp-config.php file using Vim.

    sudo vim /opt/bitnami/wordpress/wp-config.php
  5. Press I to enter insert mode in Vim.

  6. Delete the following lines of code in the file.

    define('WP_SITEURL', 'http://' . $_SERVER['HTTP_HOST'] . '/'); define('WP_HOME', 'http://' . $_SERVER['HTTP_HOST'] . '/');
  7. Add one of the following lines of code to the file depending on the version of WordPress that you're using:

    • If you're using version 3.3 or lower, add the following lines of code where you previously deleted the code.

      define('WP_SITEURL', 'https://' . $_SERVER['HTTP_HOST'] . '/'); define('WP_HOME', 'https://' . $_SERVER['HTTP_HOST'] . '/'); if (isset($_SERVER['HTTP_CLOUDFRONT_FORWARDED_PROTO']) && $_SERVER['HTTP_CLOUDFRONT_FORWARDED_PROTO'] === 'https') { $_SERVER['HTTPS'] = 'on'; }
    • If you're using version 3.3.1-5 or higher, add the following lines of code where you previously deleted the code.

      define('WP_SITEURL', 'http://DOMAIN/'); define('WP_HOME', 'http://DOMAIN/'); if (isset($_SERVER['HTTP_CLOUDFRONT_FORWARDED_PROTO']) && $_SERVER['HTTP_CLOUDFRONT_FORWARDED_PROTO'] === 'https') { $_SERVER['HTTPS'] = 'on'; }
  8. Press the Esc key to exit insert mode in Vim, then type :wq! and press Enter to save your edits (write) and quit Vim.

  9. Enter the following command to restart the Apache service on your instance.

    sudo /opt/bitnami/ctlscript.sh restart apache
  10. Wait a few moments for your the Apache service to restart, then test that your distribution is caching your content. For more information, see Test your Amazon Lightsail distribution.

  11. If something went wrong, re-connect to your instance using the browser-based SSH client. Run the following command to restore the wp-config.php file using the backup you created earlier in this guide.

    sudo cp /opt/bitnami/wordpress/wp-config.php.backup /opt/bitnami/wordpress/wp-config.php

    After you restore the file, enter the following command to restart the Apache service:

    sudo /opt/bitnami/ctlscript.sh restart apache

Additional information about distributions

Here are some articles to help you manage distributions in Lightsail: