access control

Checking your connection

Verifying that you are on an authorized network… This may take a moment.

internal · confidential

Web Developer Handover

Handover documentation for the LYD client portfolio — 11 WordPress sites on A2 Hosting and Niagahoster, domains across Go Daddy (two accounts), Niagahoster, and Namesilo, plus Klaviyo and tmrwlabs. The master credential map is the Google Sheet linked in Credentials.

01Overview

What this document is and what it isn't.

This is the canonical handover reference for the LYD web developer managed by Boromeus Agie.

The credentials mapping is only in the Google Sheet linked under Credentials — not on this page.

Stack at a glance

11
WordPress sites
Elementor Pro; themes include Hello Elementor, Neve, BeTheme, Mikalto, TT5 (Internal)
2
Hosting
A2 Hosting (9 sites) · Niagahoster (2 sites)
3
Registrars
Go Daddy 1 · Niagahoster · Namesilo — auto-renew default Yes; fill real expiry in Renewals
2
EDM
Klaviyo and tmrwlabs

02How to use this doc

Same workflow as the workbook README — adapted for this page.

  1. Read top to bottom. Each section is self-contained; natural flow is Overview → venues/Websites → Hosting → Domains.
  2. Renewals is the early-warning system. Sort by days-until-expiry ascending. Anything <30 days needs action this week (workbook uses conditional formatting).
  3. Credentials live in the linked spreadsheet only. Section 08 opens the Google Sheet; do not copy vault data into this HTML page.
  4. Status values stay consistent. In the workbook, use dropdowns for status columns so formatting works; here, use the same vocabulary when you edit.
  5. Update the Change Log. Any edit → add a row. Audit trail.
  6. Indonesian locale. Currency Rp (IDR), dates DD/MM/YYYY. In Google Sheets set locale to Indonesia for formatting parity with the workbook.

03Critical safety notes

Read these before touching anything live.

Never share this workbook or page with "Anyone with link." Use email-restricted access only. It maps infrastructure; leakage gives attackers a complete roadmap.
Always backup before changes. Confirm a recent backup exists (Maintenance sheet). UpdraftPlus → Drive; spot-check the destination and last run.
Domain transfers take 5–7 days. Plan, never rush. ICANN locks newly transferred domains for 60 days afterward.
WordPress + Elementor: always test plugin updates on staging first if the site has custom code — major Elementor releases often break custom CSS and Theme Builder.

04Venues

Master list of all 11 websites under management.

#Client / BrandDomainStatus

Site names match the Websites sheet. Fill contact emails and monthly fees (IDR) as needed. The workbook references a venues step in the checklist — use this table as the portfolio list. Suggested status labels: Active · On Hold · Maintenance only · Pending handover · Archived.

05Websites — Technical Detail

Stack, plugins, environments per site — same columns as the Websites workbook sheet.

# Site name Live URL CMS Theme Page builder Hosting Domain registrar

Staging, known issues, deeper notes

The workbook rows above are the canonical inventory. Add staging URLs, git repo links, and known issues in your working copy of the spreadsheet (or extend this page) so nothing lives only in chat or email.

Sites with custom code

The workbook currently marks Has custom code? as No for all sites. If you add child themes, WPCode snippets, or mu-plugins, update that column and treat those sites as staging-first for Elementor and dependency updates.

Custom code should live in a git repo (private). Prefer WPCode or child themes over editing production blindly. The WordPress Stack sheet documents where each type of code belongs.

06Hosting

Two providers — accounts, plans, sites hosted, renewals (see Hosting sheet).

Account summary

#ProviderPlan / packageSites (total)Sites (hosted)RenewalAnnual cost (IDR)
1 A2 Hosting 9 LYD Bali Group, La Favela, La Plancha, La Laguna, LYD Organic, Bokashi, La Casa Del Habano, Cardinal Villas, Internal LYD Rp —
2 Niagahoster 2 La Brisa, La Santa Rosa Rp —

Quirks per host

Document the things that are not obvious from the dashboard (PHP version, disk quota, email send limits, SSH/SFTP, wp-cron vs real cron). Starter rows in the workbook:

ProviderPHP versionDisk quotaBandwidthEmail limitsSSH/SFTPNotes
A2 Hosting
Niagahoster

07Domains

Three accounts — Go Daddy (two logins) and Niagahoster. Fill expiry dates in inventory and Renewals.

Registrar accounts

#RegistrarAccount email# DomainsAuto-renew defaultVault reference
1Go Daddy 1Yes1Password → Domains → Registrar 1
2Go Daddy 2Yes1Password → Domains → Registrar 2
3NiagahosterYes1Password → Domains → Registrar 3

Domain inventory

#DomainRegistrarLinked siteRegisteredExpiryDays leftAuto-renewNotes
Auto-renew is not enough. Auto-renew fails silently when the card on file expires. Verify the payment method on each registrar quarterly.

08Credentials

Vault references and account mapping live only in the handover spreadsheet — nothing is listed on this page.

Access is restricted. Use the spreadsheet with the same rules as the vault: share person-to-person, no public links, MFA where required. If sensitive data is exposed, rotate credentials.

Open the Credentials sheet in Google Sheets

09WordPress Stack & Conventions

Default plugin stack + custom code conventions + update policy — aligned with the WordPress Stack sheet.

Default plugin stack

Each site runs a subset of these; e-commerce / EDM adds connectors as needed.

PluginPurposeLicense typeLicense sourceVersion pinningNotes
ElementorPage builder (free core)Freewordpress.orgLatest stable
Elementor ProPro widgets, Theme Builder, formsPaid (per-site or agency)Elementor accountMatch account licenseKey in 1Password → Licenses → Elementor
UpdraftPlusBackups to Drive/DropboxFreewordpress.orgLatest stableSchedule per site (Maintenance)
Wordfence or Solid SecuritySecurity, firewall, login lockdownFree / paidwordpress.orgLatest stablePick one — do not stack both
Yoast SEO or Rank MathSEO, sitemap, schemaFreewordpress.orgLatest stableRank Math is lighter; one per site
WP Rocket or LiteSpeed CacheCachingPaid / freeWP Rocket / hostingLatest stableLiteSpeed only on LiteSpeed servers
Smush or ShortPixelImage optimizationFree / freemiumwordpress.orgLatest stable
WPCodeSnippets without editing theme filesFreewordpress.orgLatest stablePrefer over functions.php for small snippets
WPForms or Fluent FormsForms (when not using Elementor Pro Forms)Free / paidwordpress.orgLatest stable
Klaviyo for WooCommerceKlaviyo connector (e-commerce)Freewordpress.orgLatest stableOnly where Klaviyo is used

Custom code conventions

WhereWhat lives thereWhen to use it
Child theme — functions.phpPHP hooks, CPTs, large structural code>20 lines or must survive plugin removal
Child theme — style.cssSite-wide CSS overridesGlobal fixes Elementor cannot reach
Child theme — template filesHeader, footer, single.php overridesWhen Theme Builder is not enough
WPCode snippetSmall PHP/JS/CSS, conditionalsQuick fixes, pixels, one-offs
Elementor → Custom CodeHeader/footer scripts (GTM, Pixel, Klaviyo)Tracking & analytics
Elementor → HTML widgetPage-specific HTML/JSCalendly, Tally, one-off embeds
/wp-content/mu-plugins/Must-use pluginsCritical config (HTTPS, admin bar)
Git repo (per site or shared)Source of truth for child theme + custom pluginsAlways commit; never edit live blindly

Update policy

  • WordPress core: minor versions auto; major manual after ~1 week (with backup).
  • Elementor / Elementor Pro: never auto on production — test on staging first; major releases break custom CSS.
  • Plugins with custom dependencies (forms, commerce, EDM): manual after staging.
  • Low-dependency plugins (security, SEO, image opt): auto-update OK.
  • Always trigger a backup before any major update.

10EDM — Email Platforms

Klaviyo and tmrwlabs — accounts, sender domains, lists & automations (EDM sheet).

EDM accounts

PlatformWorkspace / accountLogin emailPlanSending limitVault referenceNotes
Klaviyo1Password → EDM → Klaviyo
tmrwlabs1Password → EDM → tmrwlabs

Sender domains & DNS (DKIM / SPF / DMARC)

Sender domains need DKIM, SPF, and DMARC or deliverability suffers at scale. Workbook template rows below — replace with real domains and statuses.

#Sender domainPlatformDKIMSPFDMARCNotes
1send.example.comKlaviyoPendingPendingp=none
2send.example.comKlaviyoPendingPendingp=none
3send.example.comKlaviyoPendingPendingp=none
4send.example.comKlaviyoPendingPendingp=none
5send.example.comKlaviyoPendingPendingp=none

Lists, segments & active automations

PlatformAccount / brandList or flow nameTypeTriggerStatusNotes
Klaviyo
tmrwlabs
Klaviyo
tmrwlabs
Klaviyo
tmrwlabs

Typical patterns: Klaviyo — welcome, abandoned cart, post-purchase, win-back, review flows. tmrwlabs — manual campaigns, newsletter.

Monthly deliverability check per sender domain: mail-tester.com / GlockApps — catches DNS drift early (Maintenance sheet).

11Google Workspace

Organizations with Google Workspace under this portfolio. Super Admin, billing, and user lifecycle live in the Google Admin console — account details in Credentials / vault as applicable.

#Organization / brand
01La Favela
02La Plancha
03La Brisa
04Attika
05Vintage Roots
Document each tenant’s primary domain, Admin console URL, and who holds Super Admin in your runbook or spreadsheet — not in public HTML.

12Maintenance

Recurring tasks — same tasks as the Maintenance sheet (what, when, scope, tool, owner).

#TaskFrequencyScopeTool / methodOwnerNotes
1Backup verificationWeeklyAll sitesUpdraftPlus dashboard / Drive folderDevSpot-check 2 random sites/week
2WordPress core minor updatesOn releaseAll sitesAuto-update enabledAuto
3WordPress core major updatesManual, +1 weekAll sitesManual via dashboardDevBackup first
4Plugin updates (low-risk)WeeklyAll sitesBulk update via dashboardDevSecurity / SEO / image plugins
5Elementor + Elementor Pro updatesManual, after stagingAll sitesStaging → ProductionDevMajor releases break things
6Theme updates (child theme parents)MonthlyAll sitesManual, with diff checkDev
7SSL certificate checkMonthlyAll sitesHosting panel / SSL checkerDevMost are auto Let's Encrypt
8Uptime monitoring reviewWeeklyAll sitesUptimeRobot / similarDevInvestigate downtime alerts
9Broken link scanQuarterlyActive marketing sitesScreaming Frog / online toolDev
10Performance / Core Web VitalsQuarterlyAll sitesPageSpeed Insights / Search ConsoleDev
11Spam / comment cleanupMonthlySites with commentsDashboard / AkismetDev
12Database optimizationQuarterlyAll sitesWP-OptimizeDev
13Security scanMonthlyAll sitesWordfence / Solid SecurityDev
14EDM deliverability checkMonthlyKlaviyo + tmrwlabs sender domainsMail-tester.com / GlockAppsDev
15Domain renewal checkMonthlyAll domainsRenewals sheetDevVerify card on file
16Hosting renewal checkMonthlyA2 + NiagahosterRenewals sheetDev

13Renewals

Single dashboard for every expiring thing.

The Renewals sheet lists 27 rows (11 domains + A2 + Niagahoster + 11 SSL + Elementor Pro + Klaviyo + tmrwlabs). Sort by Days Until Expiry ascending; act on red / <30 days.

0
Expired
Action overdue. Resolve today.
0
≤14 days
Action this week.
0
15–30 days
Schedule renewal.
0
31–90 days
Monitor.

Summary counts in the workbook Renewals tab (📊 Summary block). Mirror those numbers here during weekly review if you maintain both.

14Handover Checklist

Tick as you go. Progress saves locally in your browser.

0 of 35 complete0%

15Change Log

Audit trail for edits to this document.

Date (DD/MM/YYYY)EditorSheet / sectionChangeReason
30/04/2026AgieAllInitial creation of handover workbookPreparing client portfolio handover

— end of document —