Web.config Edits

You may need to only copy some parts as the may have a web.config file already created

Web.config SSL Redirect

This is the way to redirect for ssl, first to www then to https

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
      <rewrite>
  <rules>
  <rule name="Redirect domain.com to www" patternSyntax="Wildcard" stopProcessing="true">            
  <match url="*" />            
  <conditions>                
  <add input="{HTTP_HOST}" pattern="domain.com" />            
  </conditions>            
  <action type="Redirect" url="http://www.domain.com/{R:0}" />        
  </rule>
    <rule name="HTTP to HTTPS redirect" stopProcessing="true">
  <match url="(.*)" />
    <conditions>
      <add input="{HTTPS}" pattern="off" ignoreCase="true" />
    </conditions>
  <action type="Redirect" redirectType="Found" url="https://{HTTP_HOST}/{R:1}" />
</rule>
  </rules>
  
</rewrite>
    </system.webServer>
</configuration>

Connection Strings and Config Source

Well below is good example of how you can do data strings for your asp.net application. Also you will notice one has a configSource so for every tag in a web.config you can provide an alternate source for the rest of that configuration. So your data strings you see there for connection we could of stored all of them in a separate file.

<?xml version="1.0" encoding="UTF-8"?>

<!--
  For more information on how to configure your ASP.NET application, please visit
  http://go.microsoft.com/fwlink/?LinkId=169433
  -->

<configuration>

    <connectionStrings>
	<!-- 
			 This is the connection string where your only changing data source, initial catalog, User ID, Password
			 -->
        <add name="51134_testConnectionString" connectionString="Data Source=hostname;Initial Catalog=dbname;Persist Security Info=True;User ID=userid;Password=Simongtest123"
            providerName="System.Data.SqlClient" />
			<add name="51134_testConnectionString2" connectionString="Data Source=hostname;Initial Catalog=dbname;Persist Security Info=True;User ID=simongtest123;Password=Simongtest123"
            providerName="System.Data.SqlClient" />
			
    </connectionStrings>
	<connectionStrings configSource="ConnectionStrings.config" />
<!--
It may be system.web or system.webserver depending on the server of windows your using.
-->
    <system.web>
	<!--
	This is best to be off so you can see very specific errors to provide to admins
        Http Error mode is best left on detailed for troubleshooting. Do this in IIS as it appears windows is not fond of this being added manually.
	-->
        <customErrors mode="Off"/>
	<httpErrors errorMode="Detailed" />
        <!--
        Below is a way you can reference another config file to split up your configs
        You can do this for organization or if there is a web.config file size limit
        -->
        <profile configSource="profile.config" />	
    </system.web>
	

</configuration>

IP address block

Below is the way you can either set to true to block the listed IP addresses or to false to only let them in.

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
   <system.webServer>
      <security>
        <ipSecurity allowUnlisted="true">    <!-- this line blocks everybody, except those listed below -->                
           <clear/> <!-- removes all upstream restrictions -->
           <add ipAddress="83.116.19.53"/>   <!-- block one IP  -->                
           <add ipAddress="83.116.119.0" subnetMask="255.255.255.0"/>   <!--block network 83.116.119.0 to 83.116.119.255-->               
        </ipSecurity>
      </security>
      <modules runAllManagedModulesForAllRequests="true"/>
   </system.webServer>
</configuration>

Host to Virtual Path

<system.webServer>
        <rewrite>
            <rules>
                <rule name="*.domain.com_Rule1" patternSyntax="ECMAScript" stopProcessing="true">
                    <match url=".*" />
                    <conditions>
                        <add input="{HTTP_HOST}" pattern="^(?:[a-zA-Z0-9-]+\.)?domain.com$" />
                    </conditions>
                    <action type="Rewrite" url="/foldername/{R:0}" appendQueryString="true" />
                </rule>
            </rules>
        </rewrite>
    </system.webServer>

== Password protected file or directories == Below is the way you can either set to true to block the listed IP addresses or to false to only let them in.

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
   <location path="filenameordirectory">
        <system.webServer>
            <security>
                <authorization>
                    <add accessType="Deny" users="?" />
                </authorization>
            </security>
        </system.webServer>
    </location>
</configuration>

Standard Wordpress URL Rewrite

     <rule name="Main Rule" stopProcessing="true">
         <match url=".*" />
         <conditions logicalGrouping="MatchAll">
             <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
             <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
         </conditions>
         <action type="Rewrite" url="index.php/{R:0}" />
	 </rule>