misaka
- debian squeeze x64
- puppet managed
local work
mount /home with acls
/etc/skel
.bashrc
# Timestamped shell FTW export HISTTIMEFORMAT='%Y-%m-%d %H:%M:%S '
.screenrc
.vimrc
add self to .ssh/authorized_keys
mkdir -m 0701 public_html
thinking about apache
Our puppet management of apache is still a mess, so we'll do it manually. What do we want to take care of?
- apache2.conf
conf.d/priv.conf
SetEnvIf Remote_Addr ^202\.4\.235\.109$ priv-group
ports.conf (listen only on 202.4.224.31, not ssl, etc.)
- stub out /var/www/html
- nice logging
- /var/log/apache2/access_logs, error_logs
- fix up logrotate fragment
- conf.d/ssl.conf
- mod_itk?
- default site
- nice server-status