Description
A Website by Umbraco CMS 13 and .NET 8
Last updated:
- 16-06-2025
Hosting
- Traditional Web Hotel
Source Control
- GitHub
Security settings for Production
- Click-Jacking Protection by HTTP Header X-Frame-Options
- Content / MIME Sniffing Protection by HTTP Header X-Content-Type-Options
- Cookie hijacking and protocol downgrade attacks Protection by HTTP Header Strict-Transport-Security
- Set HTTPS to true in appsetting
- Set Debug Mode to False in appsettings
- Handle the Excessive Headers in the Web.config about X-Powered-By and Server
Performance - Slow first Page load
- Google Page Speed for testing
- Eliminated Render-Blocking
- I optimized the loading CSS and JS in the Master View
- In web.config I added Rewrite Rule to force HTTP request to HTTPS
- In web.config I added applicationInitialization to prevent cold start
- As a workaround I set up a crone job to make a request every 5 minutes to prevent cold start
Custom Error Pages for Production
- 404 Error Page by web.config and Umbraco
- 500 Error Page by web.config and 500.html
- 503 Error Page by web.config and 503.html
Frontend
- Templates
- Razor
- Bootstrap for making the Web App mobile friendly
- HTML
- CSS
Backend
- Umbraco CMS 13
- .NET 8 and C#
Database
- SQLite used for both Dev + Prod for simplicity
Text Editor
- Visual Studio Code