dgtlmoon/digitalocean-drupal-secure

Digital Ocean Drupal image secure role

stars

commits

May 13, 2015

updated

README

Digital Ocean Drupal secure script

Adds a webadmin user+group
Sets the Drupal code base to be owned by a regular user (not www-data!)
Sets the sites/default/files/ with stickybit and owned by www-data

Whilst playing with a Digital Ocean Drupal image instance I discovered that the permissions are not really all that secure (WYSIWYG editors have a long history of allowing various attacks)

Note: I'm quite new to Ansible

Contributors

dgtlmoon

2 commits

Similar repos

dgtlmoon/drupal-10-skeleton

Just a simple d10/docker skeleton

same org

dgtlmoon/Proxmox

Proxmox VE Helper-Scripts

same org

dgtlmoon/awesome-selfhosted

A list of Free Software network services and web applications which can be hosted on your own…

same org

docker-library/drupal

Docker Official Image packaging for Drupal

290

yankcrime/dockerfiles

Dockerfiles for creating Docker images (http://docker.io)

Sanexxxx777/server-hardening-playbook

Practical Linux server hardening — every item is failure → fix → verify. SSH, firewall, service…

digininja/DVWA

Damn Vulnerable Web Application (DVWA)

13,660

spenego/Obidos

Obidos from Spenego Software is a self-hosted web app to store sensitive information securely and…

README

Digital Ocean Drupal secure script

Adds a webadmin user+group
Sets the Drupal code base to be owned by a regular user (not www-data!)
Sets the sites/default/files/ with stickybit and owned by www-data

Whilst playing with a Digital Ocean Drupal image instance I discovered that the permissions are not really all that secure (WYSIWYG editors have a long history of allowing various attacks)

Note: I'm quite new to Ansible