I think it's time articles like these start suggesting an infrastructure as code product, like chef or puppet, to do the heavy lifting. I feel like doing this stuff by hand should be considered insecure and outdated..
How to set up a safe and secure Web server
21–30 of 148 posts
Re: How to set up a safe and secure Web server
#22Earlier quoted context omitted.
Did you read the article? You still need to setup nginx or apache or whatever on EC2. Page 2 onwards actually deals with these things
Yeah. So why pay $270?
Re: How to set up a safe and secure Web server
#23Pardon my stupidity, but how would one go about getting an IP address for a server installed at home? Is it a static IP address provided by my ISP, or something else ?
Re: How to set up a safe and secure Web server
#24Better hardware would be an HP Microserver (which should win the contest for "worst URL ever"): http://h10010.www1.hp.com/wwpc/us/en/sm/WF05a/15351-15351-42... Has ECC RAM support. Takes 4 3.5" hard disks, and runs very quiet and cool.
That is a truly frightening URL, makes me wonder what kind of CMS they are running that generates 100 character long URI (Vignette?).
Re: How to set up a safe and secure Web server
#25"...being locked to IIS as a Web server (or dependent on crippled Windows ports of better Web servers) means you'll be playing in the bush leagues. IIS is found running many huge and powerful websites in the world, but it's rarely selected in a vacuum..." I sense a little bit of bias. As a multiplatform developer I can think of a number of reasons why someone might opt to go the Windows Server route. ASP.NET MVC 4 is…
Do those versions let you use the products on production web servers though?
Re: How to set up a safe and secure Web server
#26Better hardware would be an HP Microserver (which should win the contest for "worst URL ever"): http://h10010.www1.hp.com/wwpc/us/en/sm/WF05a/15351-15351-42... Has ECC RAM support. Takes 4 3.5" hard disks, and runs very quiet and cool.
Re: How to set up a safe and secure Web server
#27Pardon my stupidity, but how would one go about getting an IP address for a server installed at home? Is it a static IP address provided by my ISP, or something else ?
If you have a dynamic IP, Dyn offers DNS services[0] that let you tie a domain to it through them. I believe it requires you to install something on your machine that monitors your IP and reports it back. Otherwise, you just use your IP and make sure to edit the DNS yourself when it changes. [0]: http://dyn.com/dns/
Re: How to set up a safe and secure Web server
#28Pardon my stupidity, but how would one go about getting an IP address for a server installed at home? Is it a static IP address provided by my ISP, or something else ?
It really depends on the ISP. A static IP generally has to be requested, and at a cost. Additionally, some ISP's like to be restrictive blocking inbound low ports such as 25, 80, 443 - so hosting a web server off your home connection might be a problem depending on the ISP.
Re: How to set up a safe and secure Web server
#29Pardon my stupidity, but how would one go about getting an IP address for a server installed at home? Is it a static IP address provided by my ISP, or something else ?
Re: How to set up a safe and secure Web server
#30http://howto.biapy.com/en/debian-gnu-linux/system/security/h...
also, chrooted sftp-only accounts
http://en.wikibooks.org/wiki/OpenSSH/Cookbook/SFTP#Chrooted_...