Joomla/Apache2 and PCLinuxOS - Questions

[frazelle09]

We're running a Joomla website on a shared host and using Moodle as well.  Our webhoster is unable to allocate any more memory for our php file(s) so we would like to separate the Moodle area from the Joomla site and serve it from our home desktop computer.

The desktop is currently running PCL 2010 Beta 1, is a DuoCore 2.8 Gb, 500 Gb hard drive and a couple of Gb. of RAM.  The harddisk only has the three ? usual PCL partitions on it and it has about 300 Gb of space, maybe 200 of which we could use.  The computer itself runs a FAH program 23/7.

Is there any way of setting up a separate partition just for a webserver?  About a year or so ago we downloaded and setup a trial website with the BEL 2008 edition i think it was.  We still have the DVD.  We were very surprised/pleased that it was so easy to do.

Any ideas?  Have a great evening!  

[frazelle09]

i found this link still on the web about installing or Bel-ifing a PCL 2009 setup

http://belproject.org/mwiki/index.php?title=PCLOS_LAMP

On another forum it was suggested that i place /var and /var/html in their own partitions.  If i did this on my Desktop box would it be secure enough to then use it as a Moodle server?

Have a great evening! 

[travisN000]

Only you can answer the question "is it secure enough?", as it depends on what you are comfortable with.  Does the PC have valuable / personal info?

I have a small business website running wordpress on a PCLOS 2010 base;  I put /var and /home on separate partitions...  the purpose of breaking the install onto separate partitions is to prevent / from being unable  to boot due to insufficient disk space.  With a web server all the logs and files associated with the server are on /var ...sometimes these can become so large as to fill the partition.  I suppose putting /var/html on a separate partition would create a hard limit on amount of uploads to your webroot from users if you wanted to separate it from /var.

The how to on the link you posted looks to be pretty close to the configuration I used; previously I ran the same website BEL-SBK 1-5 and never had any security issues.  The one thing I would recommend is to consider locking down ssh;  If you check your logs you will most certianly see constant attacks on ssh.  There are a number of good tutorials on securing SSH available on the net;  I would start by limiting ssh login to only a single (non-root) user with a very strong password, or only allow authentication using ssh keys.   fail2ban (also in the repos) or a similar program can help to limit these attacks as well.

I'm sure YouCanToo will have more suggestions..