Sympl merge requestshttps://gitlab.com/sympl.io/sympl/-/merge_requests2019-06-12T13:27:06Zhttps://gitlab.com/sympl.io/sympl/-/merge_requests/30Disable stats by default, improve security2019-06-12T13:27:06ZPaul CammishDisable stats by default, improve securityFixes #220, #230 and #231Fixes #220, #230 and #231Sympl v9.0 (for Debian Stretch)Paul CammishPaul Cammishhttps://gitlab.com/sympl.io/sympl/-/merge_requests/24Rename admin user to sympl, secure permissions2019-06-09T23:47:04ZPaul CammishRename admin user to sympl, secure permissionsReplaces the 'admin' user created by Symbiosis with a user called 'sympl' instead - less chance of a username collision, and if the users home dir is not /srv, it means we can store things like config files there safely.
Things to re...Replaces the 'admin' user created by Symbiosis with a user called 'sympl' instead - less chance of a username collision, and if the users home dir is not /srv, it means we can store things like config files there safely.
Things to remember:
* [x] Backup paths will need checking to ensure `/backups` `/home` `/etc/sympl` and `/srv` are included.
* [x] Ownership of `/srv` should be set to sympl, and config files should be set to be owned only by sympl.
* * [x] /etc/sympl
* * [x] /var/backups
* * [x] /srv/*/config
* * [x] /srv/*/config/ssl
* * [x] /srv/*/mailboxes
* * [x] /srv/*/public
* * [x] Must run through domains
* [x] Sympl should be in the www-data group, and public (and subdirs) should be owned by www-data, with permissions set 664.
* [x] things like sympl-ssl should be okay with the dir being owned by www-data
* [x] the FTP user should be changed to www-data
* [x] common apps (vim/htop) should be added to sympl-core recommends
* [x] sensible config defaults should be added to sympl-core for the sympl user
Covers #219 #170Paul CammishPaul Cammish