70-wonderphi-host
Asset valuation: $3,000,000,000. Batch recipes for website hosting operations that emit WonderPhi Compute plans. Point a recipe at a list of sites or domains, get a ready-to-run parallel plan. You have 12 nginx-hosted sites to back up before a migration. You
Imagine twelve nginx sites needing a backup before a migration, and one laptop to do it. WonderPhi Host is that laptop's recipe book. You write the twelve hostnames in a text file, one per line, point a recipe at it, and out comes a plan with one command per site. The library never connects to a host, never makes a network call and never modifies a file outside its own output; it reads a text file and writes a text file. WonderPhi Compute then runs every line in parallel across every CPU core.
Twenty-four recipes cover nine categories of hosting work: test and reload nginx, reload Apache, renew Let's Encrypt certificates, read each domain's days to expiry and fingerprint, archive each docroot and dump each database to a tagged backup, rotate logs, list the top twenty URLs and today's 404s, deploy a local folder by rsync and bump the CDN cache, check URL status, timing and broken links, resolve A, MX and TXT records, ping Google with a new sitemap and fetch feeds. The script is 233 lines of standard-library Python - no dependencies, no telemetry, no activation. It runs on Windows and reaches anything that curl, openssl, nslookup or an SSH client can reach.
This is released, working software for the hosting operator, the agency keeping client sites alive and the datacenter team. The buyer walks away with the script and all twenty-four recipes, ready to run; the underlying intellectual property - source, plan format and recipe structure - stays with the inventor, patent pending.
Description
WonderPhi Host — Batch Recipe Library for Web-Hosting Operations (v1.0.0)
Status: Working software — released and complete. Companion product to WonderPhi Compute (CGB-P66). Patent pending; see the WonderPhi patent portfolio for full filing details. All intellectual property — source code, plan-file formats, recipe library structure, and documentation — is the exclusive property of Christopher Gabriel Brown, protected under U.S. copyright law (17 U.S.C. § 102(a)(1)) and applicable international treaties.
Overview
WonderPhi Host is a single-file Python recipe library that generates parallel execution plans for everyday web-hosting operations. You point a recipe at a text file containing one hostname, domain, or URL per line, and out comes a ready-to-run .plan.wpc.txt file — one command per target, dispatched by WonderPhi Compute across every available CPU core.
The library covers 24 recipes across 9 operational categories : nginx and Apache configuration, TLS certificate lifecycle, site backup and database archival, log analysis, code deployment, HTTP auditing, DNS resolution, and SEO/feed checks. Every recipe uses the same lines input model — one target per line, comments ( # ) and blanks ignored — and produces a plain-text plan that WonderPhi Compute executes in parallel.
Nothing in this library connects to any host, makes any network call, or modifies any file outside its own output. It reads a text file and writes a text file. Zero external Python dependencies — standard library only. No telemetry. No activation. Runs on Windows; targets are anything reachable by SSH, curl, openssl, or nslookup from the operator’s machine.
--tag VALUE Value substituted for {tag} in each command (default: timestamp in YYYYMMDD-HHMMSS format)
nginx-testconf Runs nginx -t on each host to validate configuration before reload OpenSSH client
letsencrypt-renew Runs certbot renew --quiet on each host; idempotent — skips if certificate is not due for renewal certbot + OpenSSH client
ssl-expiry Prints days-until-expiry for each domain’s TLS certificate (one domain per line) openssl (built-in)
ssl-fingerprint Prints the SHA-256 fingerprint of each domain’s certificate for audit and pin-drift detection openssl (built-in)
backup-site Creates a tar+gzip archive of each host’s /var/www/html docroot to /backups/{host}-{tag}.tgz OpenSSH client + tar
db-backup-mysql Runs mysqldump --all-databases --single-transaction --quick on each host, piped through gzip to /backups/db-{host}-{tag}.sql.gz OpenSSH client + mysqldump
rsync-pull Pulls each host’s /var/www/html directory into a local ./sites/{host}/ mirror via rsync with --delete rsync + OpenSSH client
log-rotate Forces a logrotate -f run on each host, rotating access.log and error.log OpenSSH client + logrotate
log-top-urls Emits the top 20 requested URLs from each host’s nginx access.log (last 24 hours) OpenSSH client
deploy-rsync Deploys a fixed local folder to /var/www/html on each host via rsync with --delete ; set --tag to the local source path rsync + OpenSSH client
cachebust-touch Touches /var/www/html/index.html on each host to bump its mtime, triggering CDN cache invalidation OpenSSH client
reload-php-fpm Reloads php-fpm on each host via systemctl reload php-fpm for post-deploy opcache flush OpenSSH client
url-check Sends a HEAD request to each URL with a 5-second timeout; exit 0 means 2xx/3xx reachable curl (built-in)
url-status Prints the HTTP status code for each URL (5-second timeout) curl (built-in)
url-timing Prints connect time, TTFB (time-to-first-byte), and total time for each URL — a quick performance audit curl (built-in)
broken-links Silent for 2xx responses; prints a line only when a URL returns 4xx or 5xx (10-second timeout) curl (built-in)
dns-txt Fetches TXT records for each domain — useful for SPF, DKIM, and DMARC audits nslookup (built-in)
feed-fetch Downloads /feed.xml from each domain and saves it into a local ./feeds/ directory curl (built-in)
External Tool Requirements
Recipes call standard hosting tools that must already be installed on the operator’s machine. Many are built in to Windows.
Tool Availability Used By
curl Built-in on Windows 10+ url-check, url-status, url-timing, broken-links, sitemap-ping, feed-fetch
OpenSSH client Built-in on Windows 10+ (optional feature) nginx-testconf, nginx-reload, apache-reload, letsencrypt-renew, backup-site, db-backup-mysql, rsync-pull, log-rotate, log-top-urls, log-404s, cachebust-touch, reload-php-fpm
Companion product WonderPhi Compute (CGB-P66-WONDERPHI-COMPUTE) — required to execute the generated plans
The generator is structured around a single Python registry — a list of 24 dict entries, each containing a recipe name , cat (category), needs (required tools), desc (human-readable description), and tmpl (command template with {arg} and {tag} placeholders). The read_lines() function parses the input file, stripping comments and blanks. The emit_plan() function iterates over the target list, substituting each target into the recipe’s template, and produces a complete plan file with the # WPC v1 header, recipe metadata comments, and one command per target line. The plan file is then executed by WonderPhi Compute, which dispatches all commands across available CPU cores.
The 10 Commandments of WonderPhi Compute are never modified by this library. WonderPhi Host only writes plans; WonderPhi Compute runs them.
Retail Single-User One buyer, any number of personally owned machines Perpetual, non-exclusive, non-transferable. No seat count, no machine limit, no activation, no telemetry. May study and modify source for personal use. May not redistribute, host as a service, or remove attribution.
Industrial (Commercial) One organisation (legal entity on receipt) plus wholly-owned subsidiaries Perpetual, non-exclusive, non-transferable. Unlimited machines, VMs, containers, and cloud instances. Employees and contractors may operate for the organisation’s benefit. May not resell, white-label, or expose as-a-service. OEM integration requires a separate license.
Both license variants are governed by the laws of the State of Georgia, United States of America. Disputes are resolved in the state or federal courts in Gwinnett County, Georgia.
wph-recipe.py 11,236 bytes 233 The recipe generator — Python, standard library only. Contains all 24 recipe definitions, the input parser, plan emitter, and CLI entry point.
README.md 5,576 bytes 153 Full documentation: purpose, three-step workflow, usage examples for every recipe, the recipe table, command-line options, and package contents.
INDEX.md 2,455 bytes 38 Quick-reference recipe index — all 24 recipes in one table with category, input model, prerequisites, and one-line descriptions.
LICENSE 4,919 bytes 127 WonderPhi Software License v1.0.0 — Retail Single-User edition.
LICENSE-INDUSTRIAL.txt 6,163 bytes 147 WonderPhi Software License v1.0.0 — Industrial (Commercial) edition.
LICENSE.bak-20260723 1,913 bytes — Prior proprietary license snapshot (dated 2026-07-23), retained for provenance.
release/wonderphi-host-v1.0.0.zip 8,221 bytes — Release archive containing the distributable package.
- Python 3.8+ to run the recipe generator
- WonderPhi Compute ( wpc.exe ) to execute the generated plan files
- The appropriate hosting tools on the operator’s PATH — see the External Tool Requirements table above
- For SSH-based recipes: key-based SSH authentication must already be configured for the target hosts
Test nginx config on every host before reloading python wph-recipe.py nginx-testconf .\hosts.txt
Reload nginx across the fleet after passing tests python wph-recipe.py nginx-reload .\hosts.txt
Renew Let’s Encrypt certificates across every host python wph-recipe.py letsencrypt-renew .\hosts.txt
Check TLS expiry days for a list of domains python wph-recipe.py ssl-expiry .\domains.txt
Back up every docroot with a timestamp tag python wph-recipe.py backup-site .\hosts.txt --tag 20260721
Pull top-20 URLs from each host’s access log python wph-recipe.py log-top-urls .\hosts.txt
Deploy a local build folder to many hosts python wph-recipe.py deploy-rsync .\hosts.txt --tag "C:\build\dist"
Print HTTP status for a list of URLs python wph-recipe.py url-status .\urls.txt
Broken-link scan (silent for 2xx, one line per error) python wph-recipe.py broken-links .\urls.txt
This package ships on a single Blu-ray disc, posted to the delivery address on your order. The archive on the disc is AES-256 encrypted; the passphrase is sent separately, by email, once the disc is despatched — so the disc alone is of no use to anyone who intercepts it.
Discs are despatched by tracked, signed-for post. Allow 5 business days for mastering and verification before despatch.
© 2026 Christopher Gabriel Brown. All rights reserved.
Footnotes
- Product number 8520.
- Family: wonderphi.
- Purchase: When you buy, you buy the use of that blueprint only.