= misaka =

{{attachment:misaka_imouto.jpg}}

 * debian squeeze x64
 * puppet managed

== local work ==
 * mount `/home` with `acl`s
 * `/etc/skel`
  * `.bashrc` {{{
# Timestamped shell FTW
export HISTTIMEFORMAT='%Y-%m-%d %H:%M:%S  '
}}}
  * `.screenrc`
  * `.vimrc`
  * add self to `.ssh/authorized_keys`
  * `mkdir -m 0701 public_html`


== thinking about apache ==

Our puppet management of apache is still a mess, so we'll do it manually. What do we want to take care of?

 * apache2.conf
 * conf.d/priv.conf {{{
SetEnvIf Remote_Addr ^202\.4\.235\.109$ priv-group
}}}
 * ports.conf (listen only on 202.4.224.31, ''not'' ssl, etc.)
 * stub out /var/www/html
 * nice logging
  * /var/log/apache2/access_logs, error_logs
  * fix up logrotate fragment
 * conf.d/ssl.conf
 * mod_itk?
 * default site
  * nice server-status