tl;dr - I have a rooted linux box that I want to run tomcat on as a server (No Apache Web Server) how would you set this up avoiding common security pitfalls?
I've written a Grails App that I want to run on a VPS I rent. The VPS has very little memory and I am using it for the sole purpose of running this application so I don't need the apache web server.
This is my first venture into Server administration and I'm sure to fall into some well known traps.
- Should I use iptables to redirect requests from port 80 to 8080?
- Should I run tomcat as root or as its own user?
- What configuration settings would be good for a low memory system expecting less than 10 concurrent users?
Hopefully an easy one for you! Anyone who could link to a tutorial would be a personal hero destined for great things no doubt.