Support » Installing WordPress » www-data alternatives

  • Hi!
    I am installing wordpress on ubuntu, following the step-by-step of the website https://ubuntu.com/tutorials/install-and-configure-wordpress#3-install-wordpress. On that page there is a note saying “Note that this sets the ownership to the user www-data, which is potentially insecure, such as when your server hosts multiple sites with different maintainers. You should investigate using a user per website in such scenarios and make the files readable and writable to only those users. This will require configuring PHP-FPM to launch a separate instance per site each running as the site’s user account. In such setup the wp-config.php should (read: if you do it differently you need a good reason) be readonly to the site owner and group and other permissions set to no-access (chmod 400). This is beyond the scope of this guide, however.” I would like to ask how do I configure PHP-FPM to launch a separate instance per site each running as the site’s user account.
    Thank you

Viewing 2 replies - 1 through 2 (of 2 total)
  • On that page there is a note saying “Note that this sets the ownership to the user www-data, which is potentially insecure, such as when your server hosts multiple sites with different maintainers.

    Does the highlighter part of the “note” apply to you?

    If you’re the only one using the server (even if you’re hosting multiple sites), this should not be an issue.

    In any case, configuring a webserver is way outside the scope of what the WordPress support forum is meant for. If you really need to do this, I’ll recommend seeking help in a Linux or sysadmin forum… eg Ubuntu’s own support forum, Stack Exchange’s “Server Fault” Q&A forum, etc.

    Good luck!

    Thread Starter solardamarta

    (@solardamarta)

    I am the only one using the server, so there should be no issue. Thank you very much for your help!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘www-data alternatives’ is closed to new replies.