1,148 reputation
510
bio website virtualmin.com
location
age
visits member for 5 years, 7 months
seen Dec 16 at 1:46
I work on Virtualmin, Webmin, and Usermin.

Nov
30
awarded  Caucus
Nov
14
answered Set up squid as a reverse proxy behind a transparent proxy
Oct
29
comment VPS with no X server - need a remote WWW GUI to manage FTP accounts remotely
While I'm comfortable running Webmin on the open web (i.e. not behind an SSH tunnel), I do recommend enabling two-factor authentication, and making sure Webmin is included in your regular update schedule (Webmin's security record is pretty good, with the last RCE or data exposure bug being several years ago, but no software of this size or complexity is flawless and running as root on millions of machines it is a very high value target, on par with ssh or similar).
Oct
29
answered Is there a Virtuamin API to change feature and plugins activation?
Oct
29
comment How do you access Webmin?
Note (for future readers) that Webmin also supports the sudoers file; any users that have ALL permissions (i.e. they can become root at will on the command line) will be allowed to login to Webmin and have full access. This handles the case of Ubuntu and other distros that don't have a root password, by default, but the first user has sudo privileges.
Sep
24
awarded  Autobiographer
Aug
11
comment Staging Multiple Git Branches on a single server
Oh, and you could also use completely separate instances of nginx, on different ports, if you wanted to isolate further.
Aug
11
comment Staging Multiple Git Branches on a single server
I don't know that I would consider that a big enough difference to impede testing and deployment, though some folks might. Given your limitations (no subdomains, sounds like you can't spin up new VMs for each staging environment), I don't know how else you can do it. If the alternative is not staging and testing at all...that's obviously not preferable. You can use includes in the nginx config to isolate the differences between environments, so those differences are testable and verifiable independently of other configuration variables.
Aug
11
answered Staging Multiple Git Branches on a single server
Aug
8
answered Using virtualmin to manage account address books
Aug
8
comment Apache Per-user web directories under user's own ID instead of www-data?
Maybe OP will let us know what he's trying to accomplish with this and it'll make it more clear what the right solution is.
Aug
8
comment Apache Per-user web directories under user's own ID instead of www-data?
Ah, yes, if OP wants Apache to also read files as a different UID, you're correct. I can't think of many reasons to do that (because Apache can be in the group of many users, so permissions can be setup quite strongly), but your solution does provide that at a small resource usage penalty. Also, to be clear, suexec doesn't have to be limited to CGI; mod_fcgid also works with suexec, providing a nice/fast/efficient way to run PHP and other apps as a speficied UID without the performance and resource problems of CGI.
Aug
7
comment Apache Per-user web directories under user's own ID instead of www-data?
Note that this is effectively doing what OP doesn't want to do: Run a separate instance of Apache for each user. ITK MPM automates that task, but it does have slightly higher resource usage than other execution models, including traditional prefork. That said, I doubt resource usage will be an issue in any of these use cases we're talking about, including ITK or running separate instances; for most users, even prefork works fine. But, OP just wants automated handling of switching users when using mod_userdir, which is easily accomplished with SuExec; no new and experimental modules needed.
Aug
7
answered Apache Per-user web directories under user's own ID instead of www-data?
Aug
7
awarded  Custodian
Aug
7
reviewed Edit Apache web server, virtual hosts, sub domains and multiple web frameworks
Aug
7
revised Apache web server, virtual hosts, sub domains and multiple web frameworks
improved formatting
Aug
7
revised Apache web server, virtual hosts, sub domains and multiple web frameworks
fixed typo
Aug
7
comment User http does not have write permissions directory?
On Linux, there is no static limit to the number of secondary groups a user can be a member of. There is a limit on FreeBSD and some other BSD nixen, but Linux is not one of them.
Aug
7
answered Apache web server, virtual hosts, sub domains and multiple web frameworks