If you're lazy (like me) and still running a few (mostly static) WordPress sites, I can recommend Simply Static. Export the whole site/blog as static pages, and take away the security / maintenance hassle of running WP and PHP.

https://wordpress.org/plugins/simply-static/

Simply Static – The Static Site Generator

Create a static website directly from your WordPress website with Simply Static.

WordPress.org

@jbaert A question for you - *where* are you hosting your static files?

I've deployed some static sites before to Netlify, and also to a simple S3 bucket. I've recently been learning more about Cloudflare Pages. (There are, of course, so many options.)

I have also used Shifter before - https://www.getshifter.io/ - which spins up WP in a Docker container when you want to update it.

(A similar services is https://www.hardypress.com/ )

Shifter: The Jamstack WordPress hosting platform.

Create or migrate WordPress sites in minutes that are scalable, secure from attacks, and 100% static with no security or caching plugins required.

Shifter
@danyork They're hosted on my own webspace, but their non-dynamic nature makes them easily cacheable by CDN. Most requests probably not even touching my server.

@jbaert Ah, that makes sense.

If you have your own space, how are you handling TLS for HTTPS support? (I've used Let's Encrypt before but one of my current hosting environments doesn't work well with that.)

@danyork let's encrypt + rewriting rules in .htaccess
@danyork creator of that plugin recommends lando and localWP