misaka

• debian squeeze x64
• puppet managed

local work

• mount /home with acls

• /etc/skel

  • .bashrc

    # Timestamped shell FTW
    export HISTTIMEFORMAT='%Y-%m-%d %H:%M:%S  '

  • .screenrc

  • .vimrc

  • add self to .ssh/authorized_keys

  • mkdir -m 0701 public_html

thinking about apache

Our puppet management of apache is still a mess, so we'll do it manually. What do we want to take care of?

• apache2.conf

• conf.d/priv.conf

  SetEnvIf Remote_Addr ^202\.4\.235\.109$ priv-group

• ports.conf (listen only on 202.4.224.31, not ssl, etc.)

• stub out /var/www/html
• nice logging
  • /var/log/apache2/access_logs, error_logs
  • fix up logrotate fragment
• conf.d/ssl.conf
• mod_itk?
• default site
  • nice server-status