# امنیت سرا (Amniyat Sara) - AI Assistant Context

## Site Overview
**Domain**: amniyatsara.com  
**Type**: WooCommerce Security Equipment Store  
**Language**: Persian (Farsi)  
**Focus**: Security systems, alarm systems, sensors, and surveillance equipment

**Primary Products**: Paradox alarm systems, sensors, sirens, MAHA central monitoring systems

## Technical Infrastructure (November 2025)

### Server Configuration
- **Web Server**: Caddy v2.10.2 (HTTP/2, automatic HTTPS)
- **PHP**: 7.4-FPM (dedicated pool, 100 workers)
- **Database**: MySQL/MariaDB
- **Cache**: Redis + WP Rocket (Full page caching enabled)
- **Theme**: mweb-digiland-pro v16.2 (ionCube encrypted)
- **OS**: Ubuntu Linux (2GB RAM VPS)

### Performance Metrics
- **TTFB**: 0.06-0.08s (97% improvement from 2.2s)
- **LCP**: Optimized with critical CSS, preloading
- **Core Web Vitals**: Passing (as of Nov 2025)

### Security Implementation (Nov 20, 2025)
**7-Layer Security Active**:
1. Network Firewall (UFW) - Ports 22/80/443 open
2. PHP Hardening - open_basedir restricted, dangerous functions disabled
3. File Permissions - Core files root:www-data (read-only), only uploads writable
4. PHP Upload Blocking - Caddy blocks *.php execution in /wp-content/uploads/
5. File Integrity Monitoring - AIDE daily checks on core directories
6. Fail2ban - WordPress protection (3 attempts, 1hr ban)
7. Automated Backups - Daily 2 AM, weekly/monthly retention

**Recent Security Incident**: Nov 19-20, 2025
- 49 identical backdoor files discovered and removed
- Attack vector: Vulnerable plugin/theme via HTTP/HTTPS
- Resolution: All backdoors removed, 7-layer security deployed
- Status: Site clean and hardened

### Active Monitoring
- **GSC (Google Search Console)**: Daily monitoring at 6 AM & 9 AM
  - Scripts: daily-gsc-update.sh, daily-gsc-monitor.sh
  - API credentials: amniyatsara-gsc-automation-9047d4722c49.json
- **Health Checks**: Every 5 minutes
- **Malware Scans**: Weekly (Sunday 3 AM)
- **Backup Verification**: Monthly (1st of month)

### Site Structure
**Main Sections**:
- فروشگاه (Shop) - WooCommerce products
- وبلاگ (Blog) - Security articles and tutorials
- محصولات (Products) - Organized by categories
- سیستم مها (MAHA System) - Central alert monitoring

**Key Product Categories**:
- اعلام سرقت (Burglar Alarms)
- دزدگیر پارادوکس (Paradox Alarms)
- سنسورها (Sensors) - Motion, glass break, water leak, magnetic
- آژیرها (Sirens)

**Popular Brands**:
- Paradox (Primary brand)
- GENIUS
- Confiade (کانفیادو)

### SEO & Indexing
- **Sitemap**: https://amniyatsara.com/sitemap_index.xml (Yoast SEO v26.3)
- **Robots.txt**: Active, allowing major search engines
- **Schema Markup**: Product structured data enabled

### Content Guidelines for AI
**Language**: Always respond in Persian (Farsi) for customer-facing content
**Tone**: Professional, technical but accessible
**Focus Areas**:
- Security system installation and configuration
- Product specifications (zones, partitions, wireless/wired)
- MAHA system integration
- Home and commercial security solutions

**Technical Terms**:
- دزدگیر = Alarm/burglar alarm
- سنسور = Sensor
- پارتیشن = Partition
- زون = Zone
- مها = MAHA (Central monitoring system)
- باسیم = Wired
- بی‌سیم = Wireless

### Archived Files Location
Historical reports and old scripts moved to _archive/:
- _archive/old-reports/ - 28 markdown reports (GSC, backups, performance)
- _archive/old-scripts/ - 70+ PHP/shell scripts (diagnostics, fixes, tests)

**Current Active Files** (root directory):
- daily-gsc-monitor.sh - GSC monitoring (active cron)
- daily-gsc-update.sh - GSC data updates (active cron)
- amniyatsara-gsc-automation-9047d4722c49.json - GSC API credentials
- robots.txt - SEO configuration
- llms.txt - This file (AI context)

### Important Notes for AI Assistants
1. **WordPress Updates**: Auto-updates disabled due to security hardening. Use WP-CLI: wp plugin update --all
2. **File Uploads**: Direct plugin installation via admin may fail. Use SSH/SFTP if needed.
3. **Theme License**: Key stored in database, may show inactive in admin
4. **PHP Execution**: Blocked in uploads/cache directories - returns 403
5. **Permissions**: Core files read-only. Temporarily chmod 775 if legitimate operation needed.

### Backup & Recovery
- **Daily Backups**: 2 AM (automated)
- **Location**: /var/backups/websites/
- **Retention**: Daily (7 days), Weekly (4 weeks), Monthly (12 months)
- **Last Verified**: November 2025

### Contact & Support
**Website**: https://amniyatsara.com  
**Email**: Available via site contact form  
**Focus Markets**: Iran, Persian-speaking customers  
**Specialization**: Residential & commercial security systems

---

**Last Updated**: November 20, 2025  
**AI Model Compatibility**: Optimized for Claude, GPT-4, Gemini  
**Version**: 2.0 (Post-security incident)