Aller au contenu | Aller au menu | Aller à la recherche

/var/log/iksaif

vendredi, janvier 22 2010

iksaif.net migration to lighttp

This week I migrated iksaif.net (and zordania.com, finestown.com, etc...) from apache to lighttpd !

It used to be like described in my previous post: http://xf.iksaif.net/blog/index.php?post/2009/05/08/Securing-a-shared-Web-Server

Now, the architecture is more like that:

lighttpd-misc --- git
                    \- redmine
                    \- lighttpd-iksaif - xf.iksaif.net
                    \- apache          - svn
                                           \- trac
                                           \- finestown
                   \- lighttpd-zordania
                   \- lighttpd-zorddev
                   \- lighttpd-uffs    - blog
                                           \- git
                                           \- redmine

Is not as performant, but it's a lot more flexible. I had to keep apache for some svn repository, because there is no dav-svn module for lighttpd.

I learned a lot, so I'll post some lighttpd configuration examples that could help you one day.

vendredi, mai 8 2009

Securing a shared Web Server

Typical users use shared hosting for their blog, etc ... On this kind of offer, the hoster have multiple clients on the same hardware. As it is impossible to be sure that clients applications are not vulnerable, we should at least be sure that if one is vulnerable, it won't bother the others. We will show you how a bad web server configuration could lead to disaster, and how to secure such a server.

The pdf version can be found at http://xf.iksaif.net/papers/securin....

Lire la suite...