Validate create-site.sh against a live WordPress site install

[khoipro]

Goal

Step-through and validate bash-scripts/create-site.sh against a fresh site on the bootstrapped test host, confirming each step_* function works as designed and is idempotent.

Scope

• Run each step_* independently (same approach as bootstrap validation)
• Record expected vs actual post-conditions
• Note any idempotency failures or latent assumptions
• Deliver patches if needed, then mark steps ✓

Steps to validate

1. step_create_dirs — directory tree + ownership + permissions
2. step_clone_repo — SSH deploy key + git clone as ubuntu
3. step_create_database — RDS DB + user + REQUIRE SSL + connection verify
4. step_credentials_file — .credentials mode 600
5. step_wp_config — wp-config.php via WP-CLI, proxy fix, RDS SSL, site URLs
6. step_apache_vhost — vhost written + enabled
7. step_php_fpm_pool — FPM pool written
8. step_reload_services — apachectl configtest + reload both services
9. step_fix_permissions — inline fallback (ct-fix-perm not installed yet)
10. step_summary — readable output

Definition of done

• All 10 steps show ✓ in the validation table
• Full script re-run is idempotent
• Any patches shipped in a follow-up PR