Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [best-practices]

Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

0
votes
3answers
194 views

A service accessing an UNC path, Win 2008R2, best practices?

I have an Apache Webserver service running on Machine A. It serves some files from machine B, by having an Alias /foo \machineB\someshare MachineB\someshare is read-accessible to "Everyone". ...
3
votes
2answers
812 views

Importance of ha.cf file in a heartbeat/pacemaker environment?

I'm having a few issues trying to understand ha.cf and how the cluster picks up on updates. For example, when creating a new cluster, I usually: Set some default options in ha.cf on node 1 - node x ...
0
votes
2answers
31 views

Bypass Browser Cache with Server Settings in Large Production Environment

We recently applied a patch to our ERP system that updated HTML, JavaScript and CSS files. After applying the patch a large volume of users called the help desk to report loss of functionality on the ...
0
votes
2answers
812 views

Cisco ASA 8.4+ redirect multiple ports - best practice?

I was wondering whether anyone could advice on best practices as to the best way to redirect multiple ports for single host in the internal network. As I understand this you can only nat a single ...
0
votes
2answers
125 views

Best Practices for publishing to a web server

I have a high traffic PHP based website and have 2 web servers which sit under a load balancer. I only have FTP access to change the files on the 2 servers when I wish to make changes to the site. ...
3
votes
1answer
401 views

Is having an IPv6 reverse lookup zone necessary for an Active Directory network?

Is having an IPv6 reverse lookup zone necessary for an Active Directory network? Normally I would just create it and move on, however, in this case the prefix is delegated and changes occasionally. ...
2
votes
1answer
987 views

Install DHCP failover on domain controllers vs member servers?

What is the recommendation for installing DHCP failover; domain controllers or member servers? I can't seem to find any recommendations either way. I did find an old question here pertaining to ...
2
votes
1answer
226 views

Seeking alternative to storing binaries in git for devops

I'm not sure how to ask this best practices question since I know many StackExchange users evidently think best practices are a bad thing ... We've got Salt and Vagrant configured to stand up servers ...
2
votes
1answer
1k views

Why is PHP open_basedir not considered a security model

On servers doing shared web hosting, or sharing the PHP environment between different PHP applications, I usually implement a security policy that uses PHP open_basedir to restrict each user to his/...
0
votes
1answer
200 views

Best practice: Wowza SSL Configuration

Screenshot: Server with Wowza running using a SSL certificate with basis configuration I get this result from the SSLLabs with the default configuration (see screenshot). The only places I can change ...
0
votes
1answer
46 views

How to create an account, that can not login?

Our Unix systems rely on corporate AD for authentication and authorization. We need to create a few "role" accounts, which shall not be able to login themselves, but to which other accounts (...
0
votes
1answer
58 views

Process separation on an OpenBSD server

I fear this may be a somewhat open-ended question that gets closed: Apologies in advance, but I'll give it a shot! I'm considering operating an OpenBSD VM with a number of services running on the ...
0
votes
1answer
121 views

Creating enterprise init script (to support all Linux distros)

I'd like to create my own init script to make my program start at boot and be controlled via "service" utility in most popular Linux distributions. Requirements: it should be portable across ...
0
votes
1answer
124 views

Consequences of exposing VM storage on same subnet as VM's and hypervisor

I recently purchased a RAID array to store my VM's and segregate the storage from the host machine. Since my needs are pretty simple I've configured the VM's to bridge with the host network (I think ...
0
votes
1answer
696 views

DNS Server 2008 R2 from 2003 - Stand Alone -

We have just implemented two new windows 2008 r2 stand alone servers running dns and they took the place of our old 2003 stand alone servers. Is there residual clean up that would need to be done on ...
0
votes
1answer
313 views

Is it a good practice use LDAP for auth in a public webapp beside the app DB?

Internet app needs to be really secure. So LDAP for auth got into the game. Instead doing the traditional db with users table, we want to authenticate agains a LDAP server. How good/bad you think it ...
0
votes
1answer
199 views

S3 backup: bucket vs. volume

I've inherited a project that has been pushing encrypted (GPG) DB backups via a backup script to an S3 bucket. That's all been well and good, but now that bootable EBS instances (where the project ...
3
votes
0answers
792 views

IIS 7.5 Request Filtering - best practice rules?

Im looking for a set of best practice rules for Request Filtering similar to what UrlScan adds by default. Any suggestions or an example list of filters is much appreciated. By default IIS 7.5 only ...
2
votes
0answers
61 views

Installing consumer software on a server

I am in need of a simple low-maintenance off-site backup solution for one or more Windows servers. I have had great success using some consumer-grade backup software that allows me to backup files ...
1
vote
0answers
77 views

Serving dynamic website to multiple domains

I have created a website with a tiny administration panel that lets the owners change attributes about the site (primary color, background image, some content etc). Their changes are stored in a ...
1
vote
0answers
44 views

Ruby on Rails Debian best practice

I've seen in various places people using Ruby compiled from source through a cloned rbenv git repository, and then installing Rails through RubyGems to get the latest version. But, from what I know, ...
1
vote
0answers
28 views

Should each task/process/role run as its own user on a Windows server?

I know that on Linux servers, it's widely considered best practice to run each task/role/process/server/program as its own user and usually in its own group. How should separate tasks be handled on a ...
1
vote
0answers
506 views

Enable shadow copy where VHD files are stored?

Should I enable Shadow Copy on the volume that stores our Hyper-V VHDs? This same volume also has all our file shares, which is why I want to turn on shadow copy. If I do enable it, will it eat up ...
0
votes
0answers
34 views

Use default `ubuntu` user to deploy an app or make separate users?

I have a Ruby on Rails app and use Capistrano to deploy it to the server. The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
0answers
24 views

Any Issues Setting Active Directory Groups Up This Way?

I am looking into restructuring our AD Groups Infrastructure and am having a hard time find the best way to reorganize. The reason this is a unique challenge is because of our employee roles. No two ...
0
votes
0answers
171 views

How to avoid specifying variables many times with puppet roles and profiles pattern?

I am writing puppet modules and trying to understand and implement roles and profiles pattern , along with some best practices, particularly about hiera autolookups and splitting the module into ...
0
votes
0answers
5 views

Isolating server errors

I'm fairly new to hosting with Digital Ocean. I only have about 3-4 sites up currently. I've ran into a few instances where if I misconfigure something or an update goes bad, it takes down all the ...
0
votes
0answers
28 views

After system state restore: SBS Baseline Configuration Analyzer 2.0 stopped working

So the system drive of our SBS 2011 server has crashed. We had a backup which we used to perform a systemstate recovery and non-authorative restore of Active Directory. Since the restore, we cannot ...
0
votes
0answers
80 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...