Re: bindfs for web docroot - is this sane?

2022-10-11 Thread tomas
On Wed, Oct 12, 2022 at 04:09:41PM +1300, Richard Hector wrote: > On 12/10/22 00:26, Dan Ritter wrote: [...] > > The better solution is to use a versioning system -- git is the > > default these days [...] > I agree that a git-based deployment scheme would be good. However, I > understand that

Re: bindfs for web docroot - is this sane?

2022-10-11 Thread tomas
On Wed, Oct 12, 2022 at 03:55:03PM +1300, Richard Hector wrote: > On 11/10/22 22:40, hede wrote: > > On 11.10.2022 10:03 Richard Hector wrote: > > > [...] > > > Then for site developers (who might be contractors to my client) to be > > > able to update teh site, they need read/write access to the

Re: bindfs for web docroot - is this sane?

2022-10-11 Thread Richard Hector
On 12/10/22 00:26, Dan Ritter wrote: Richard Hector wrote: Hi all, I host a few websites, mostly Wordpress. I prefer to have the site files (mostly) owned by an owner user, and php-fpm runs as a different user, so that it can't write its own code. For uploads, those directories are

Re: bindfs for web docroot - is this sane?

2022-10-11 Thread Richard Hector
On 11/10/22 22:40, hede wrote: On 11.10.2022 10:03 Richard Hector wrote: [...] Then for site developers (who might be contractors to my client) to be able to update teh site, they need read/write access to the docroot, but I don't want them all logging in using the same account/credentials.

Re: bindfs for web docroot - is this sane?

2022-10-11 Thread Dan Ritter
Richard Hector wrote: > Hi all, > > I host a few websites, mostly Wordpress. > > I prefer to have the site files (mostly) owned by an owner user, and php-fpm > runs as a different user, so that it can't write its own code. For uploads, > those directories are group-writeable. > > Then for site

Re: bindfs for web docroot - is this sane?

2022-10-11 Thread hede
On 11.10.2022 10:03 Richard Hector wrote: [...] Then for site developers (who might be contractors to my client) to be able to update teh site, they need read/write access to the docroot, but I don't want them all logging in using the same account/credentials. [...] Does that sound like a sane

bindfs for web docroot - is this sane?

2022-10-11 Thread Richard Hector
Hi all, I host a few websites, mostly Wordpress. I prefer to have the site files (mostly) owned by an owner user, and php-fpm runs as a different user, so that it can't write its own code. For uploads, those directories are group-writeable. Then for site developers (who might be contractors