Comment on What does your current setup look like?

• Shimitar@feddit.it ⁨8⁩ ⁨months⁩ ago

  The service runs as an unpriviledged user, even if, at worst, an intruder would delete or replace the wiki itself. Even the php-fpm behind it runs as that unpriviledged user and is not shared with any other service.

  I doubt an attacker could do anything worse than DoS on the wiki itself.

  source
• Shimitar@feddit.it ⁨8⁩ ⁨months⁩ ago

  Why?

  source

  • avidamoeba@lemmy.ca ⁨8⁩ ⁨months⁩ ago

    Not saying it’s not secure, just that I’d have constant doubts whether I’ve covered all the bases if I were doing it.

    source