Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We recently deployed a Rackspace Cloud Server of the Debian (Lenny) flavour. The server basically just needs to be set up as a LAMP server, but it will need to be put through the tests of a PCI Compliance ASV. This means things like a secured firewall and virus scanner will be necessary.

While I could go to the trouble to set everything up manually and through the process of elimination, get the server to pass the vulnerability scan, I thought I would first see if someone out there has a script or two handy to deploy a secured LAMP server.

The script would ideally configure and secure: - Apache/MySQL/PHP... obviously ;) - PhpMyAdmin - SVN - iptables - AVG for linux? (or some other virus scanner?) - SSL certificate

Other considerations for the script might be to: - Disable root access via ssh - Set up a user for SFTP access? - Configure sendmail to use a third party smtp server

Perhaps this is wishful thinking... but surely someone out there has done this!


share|improve this question

The problem is that everyone has a slightly different idea of what is the perfect setup. We use Puppet for configuring new nodes and there are some reusable puppet modules in puppet forge, but we usually end up customizing them. I've been meaning to write an article about setting up puppet, but real work prevents me from progressing.

share|improve this answer

You could take a look at the Debian package bastille. It's a server hardening script designed to increase security in a standardized way.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.