Tag Info

Hot answers tagged

19

sudo python -m SimpleHTTPServer 80 for python 3.x version, you may need : sudo python -m http.server 80 Ports below 1024 require root privileges. As George added in a comment, running this command as root is not a good idea - it opens up all kinds of security vulnerabilities. However, it answers the question.


10

Download the netinstall iso, boot it and select non-graphical install. I actually made a video once for it: http://www.youtube.com/watch?v=JOGSupJury4 The difference between ubuntu and debian is the way they are doing package testing. Debian is all about stability and ubuntu is more about all the new things (less stability).


9

I always run services with a dedicated user. So I would create these users: nginx mongo apache mysql redis You should never run the actual services as root! Often when installing these applications using your distributions package manager, as part of the installation, a user will be automatically created for each of these services. I typically use ...


8

Advantages of Ubuntu: LTS releases are supported for 5 years for the server seed. Ubuntu has been certified to work on certain hardware For those wanting more up-to-date packages & are willing to use a non-LTS release, the 6 month release cycle means that a new stable release happens more frequently than with Debian Ubuntu has some better integration ...


8

The option accesslog.filename is for the mod_accesslog module, so you need to load that module. server.modules += ( "mod_accesslog" )


8

If you want a machine for local development (a desktop machine), and you want to learn a lot - then go with Arch. It will kind of force you to learn about some under-the-hood things about GNU/Linux because you have to assemble everything from command line, so be prepared, quite a lot of reading will be required although it's not actually that hard as people ...


7

This is a big topic, but I'll try to keep it short. You could try DevStack, which will get you up and running with less configuration work. If you want to really understand the inner workings of the platform, and since you have the hardware, I would go ahead and install it from scratch on your distro of choice (CentOS and Fedora are fully supported ...


6

Actually, a slight modification to warl0ck's plan (because I'm paranoid) create the new partition boot to single-user mode mount the new partition as /new_var or something, and rsync as described you might as well run aptitude autoclean before running rsync, to reduce the amount getting copied over (or even ... clean if you don't mind re-downloading your ...


6

Even though password brute force attempts may not be successful on your system, using fail2ban has other benefits than simply blocking the attack: Keeps your auth log from filling up too much, saving disk space and making analysis easier. Reduces unnecessary CPU cycles and bandwidth servicing bruteforce attempts. fail2ban is a great tool for more than ...


6

Although POSIX has a standard for capabilities which I think includes CAP_NET_BIND_SERVICE, these are not required for conformance and may in some ways be incompatible with the implementation on, e.g., linux. Since webservers like apache are not written for only one platform, using root privileges is the most portable method. I suppose it could do this ...


5

For Apache, see if http://httpd.apache.org/docs/2.2/en/mod/mod_userdir.html#userdir and http://httpd.apache.org/docs/2.2/en/howto/public_html.html helps.


5

You're probably looking for mod_userdir: "This module allows user-specific directories to be accessed using the http://example.com/~user/ syntax." Don't be scared of fiddling with the config, just have backups of the config files and make sure your firewall blocks your apache to the outside world.


5

Assuming this isn't a typo, the install section in your typo service file contains a typo. It should be, multi-user.target instead of mulit-user.target (multi vs. multi), e.g: [Install] WantedBy=multi-user.target


5

Delays like this are often caused by reverse DNS lookups (i.e. resolving an IP address to a hostname). Do you have HostNameLookups turned on in the apache config? If so, turn it off. See also http://serverfault.com/questions/100225/apache-httpd-wont-stop-doing-reverse-dns-requests-for-clients-ips for other tips on disabling hostname resolution in apache.


5

You can see where httpd is configured to look for it's configuration files using the -V switch: $ httpd -V Server version: Apache/2.2.15 (Unix) Server built: Feb 13 2012 22:31:42 Server's Module Magic Number: 20051115:24 Server loaded: APR 1.3.9, APR-Util 1.3.9 Compiled using: APR 1.3.9, APR-Util 1.3.9 Architecture: 64-bit Server MPM: Prefork ...


5

Actually, many of your points depend on the kernel capabilities, and are therefore independent from the distribution in most cases. Even if some distributions maintain their own kernels, they still rely on source updates, especially for security-related and standard-related issues. Efficient utilization of multi-core CPUs : this is related to process ...


4

I assume that your gateway device to the internet does NAT (network address translation), i.e. your home network uses for example a private network like 192.168.0.* and you dynamically get one IP from your ISP which is used by the gateway. In that case someone on the internet only is able to access port 80 on your home network web-server, when you have ...


4

Your question is quite subjective, and configuring the port should be very easy with any http server. Though, I would recommend lighttpd with server.port = 1080 (or whatever above 1024 for non-root users) in a configuration file: server.document-root = "/home/foo/www" server.port = 1080 It's a complete enough http server, and for serving static ...


4

There is no such thing like a "system' webserver in unix and different "methods". You can install software on your system which contains a simple webserver and use it or not. python -m SimpleHttpServer just loads the SimpleHttpServer module, which contains a basic webserver. Something simliar exists for Perl, just have a look at CPAN: ...


4

There are many tutorials for apache on how to do this. This is one of them. Here is another one One thing that you would change if you already have a certificate generated you would copy the certificate files to appropriate locations vs. generating them yourself. If you are not using apache please post the webserver you're using.


4

You need to make the public_html and the files there readable by the web server. One way is to run chmod o+x /home/user (allow everyone to switch to the home directory) and chmod -R o+rX /home/user/public_html (make public_html and files there readable by everyone). If you need better access controls, use ACLs.


4

You can try using ApacheTop. It shows out output like this:


4

If you have mod_status enabled (and possibly ExtendedStatus set to On), and you're in a whitelist like this: # # Allow server status reports generated by mod_status, # with the URL of http://servername/server-status # Change the ".example.com" to match your domain to enable. # <Location /server-status> SetHandler server-status Order deny,allow ...


4

Generally, your thoughts are all in the right direction. Specific answers to your questions: "Can I run a cron which will push via rsync or SMB to the NAS box?" Yes, absolutely. "How would I use rsync to pull down the /home directory on my remote server? Is it easy? Yes, here's the command I use. Check rsync docs for explanations: rsync -vrltpz --force ...


4

There really isn't any "right" distribution. The good thing about free/libre/open source software is that most of them are available free (as in beer) as well. So you can experiment with whatever distribution you like, see if it fits your needs and try another if it doesn't. Your requirement to host web apps is perhaps a bit too general. LAMP ...


4

Note: $CATALINA_HOME is where Tomcat is installed. If the application is a WAR file, just drop it in $CATALINA_HOME/webapps and TC will automatically create the web app for you. If you have all of the contents of the application, you must distribute as so: The root path of your application: $CATALINA_HOME/webapps/newfolder Define your web.xml file here: ...


4

Daemon processes generally are unable to login for a number of reasons. Among other security is a significant issue. www-data is assumed to be available on your system if you are running a web servers on many platforms. If I can log on to that user id, I can easily compromise your web-server and/or its content. (Think serving up malware.) It is best not ...


4

Your box has multiple interfaces. Each interface can have multiple IP addresses. (among others there is 127.0.0.1 on lo and 10.1.5.5 on eth0, or something like that. - See ip addr for details.) Now you have some kind of web server running on that box. To be accessible to others it has to bind to some interfaces or IP adresses. Somewhere in the config file ...


4

The easiest way is to trick your local DNS resolver by putting IP address - server name entries into /etc/hosts. Then you can access the website with the correct name because your browser sends the correct Host in the HTTP request header. See http://stackoverflow.com/questions/857376/send-host-header-when-accessing-ip-address-in-firefox for more options.



Only top voted, non community-wiki answers of a minimum length are eligible