Got a notice from my ISP that in a few weeks time I will no longer have a static IP address. Not the ISP fault however, they would be happy to provide the service. It is the company that manages the city fiber network that blames a system upgrade for the coming inability to provide static IP addresses.
I recently added a Content Security Policy header to my web servers. I found a number of issues around getting analytics and embedded videos and maps working. Other sites will have more issues but I suspects these are among the most common.
With Debian 10 (buster) the default firewall is nftables so it’s time to convert my iptables rules. Since Debian stable is never first with anything I was surprised to see how relative few articles and blogs there are about nftables compered to iptables.
Ansible role with commentary for setting up your own mail server with Postfix and Dovecot. This could be considered a part two of Mail relay, MX backup and spam filtering with Postfix. Many postfix configurations are identical between these setups.
If you run your own mail server it is a good idea to have a MX backup in place. When your mail server goes down or you need to upgrade it, the MX backup will step in and store all mail until the mail server is back up.
My article Running Drupal on Debian 8 with Apache 2.4, event MPM and PHP-FPM (via socks and proxy) is one of the most read on xdeb.org. Here is the updated version for Debian 9. I mention Drupal in the title but this setup should work well for most PHP based systems like Wordpress and Joomla etc.
After reading articles like My First 5 Minutes On A Server by Bryan Kennedy and My First 10 Minutes On a Server by Cody Littlewood I was inspired to write up how I setup a new server. There are no special tricks in the way I setup servers to make them secure.
Updated version of this article: Running Drupal on Debian 9 with Apache 2.4, HTTP/2, event MPM and PHP-FPM (via socks and proxy) I’m building a new Ansible playbook for setting up web servers with Debian 8. I have always used mod_php before and it has been very stable but have some well known drawbacks.
In my blog post Running Lighttpd as a static file server for Drupal 6 on a Debian GNU/Linux server I describe how I set up a static file server here on xdeb.org. I mentioned there that I have not done any benchmarking on the improvements.
I found Robert Douglass article Using Lighttpd as a static file server for Drupal and thought it would be interesting to try out. Check also out the Lighttpd home page (pron. lighty). There are two main reasons for using a separate server for static files.