[SLL] Blog Server

[Brian Hatch]

Very close to 2007-12-06 07:57 -0800, Eric Kahklen enjoined:

> I am trying to setup a blog server on Debian Etch.  Apt easily installs 
> the blog software but does not configure apache.  My first instinct is 
> to setup a named based virtual host pointing to the blog software 
> location (/usr/share/blogsoftware), but I thought I should check and see 
> if there was a better/more secure way.

I always prefer named virtual hosts.  (SSL being the one place where
you can't use them as effectively.)

Assuming apache2, what I do is copy /etc/apache2/sites-enabled/*default
to a new file name, remove the *default, and build on it with my new
changes.

My layout generally looks like

  /etc/apache2/sites-enabled/000-security
  /etc/apache2/sites-enabled/010-defaults
  /etc/apache2/sites-enabled/100-virthost1
  /etc/apache2/sites-enabled/110-virthost2
  /etc/apache2/sites-enabled/120-virthost3
  /etc/apache2/sites-enabled/900-fallback  

I don't like global '/cgi-bin' mappings, for example, so I'm explicit
about which virtualhosts get them.

You can use includes to your advantage for things where you want to
have many of the virtual hosts be similar.

-- 
Brian Hatch                  They sent a sewer down to stitch
   Systems and                the tear in the sewer line.
   Security Engineer
http://www.ifokr.org/bri/

Every message PGP signed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists2.linuxjournal.com/pipermail/linux-list/attachments/20071206/17ab931a/attachment.sig