Building new Wordpress on CentOS 7

Dashrender

From here I'm going to start by following @jaredbusch's post.
https://mangolassi.it/topic/12501/installing-wordpress-on-centos-7-minimal/2

First we install LAMP (Linux Apache, MySQL/MariaDB, PHP)

yum -y install httpd;
yum -y install mariadb mariadb-server;
yum -y install php php-mysql php-xml php-gd wget nano;

OK no issues there.

Dashrender

hold

Dashrender

hold

Dashrender

hold

Dashrender

hold

Dashrender

hold

Dashrender

hold

http://www.tecmint.com/things-to-do-after-minimal-rhel-centos-7-installation/2/#C9

JaredBusch

@Dashrender said in Building new Wordpress on CentOS 7:

Update CentoOS
type - yum update

You'll be prompted if you want to download the updates,
type - y

You might get some additional prompts like the one below,
type - y

The normal thing to do is supply the -y switch to cause it to accept all prompts. Especially on the initial update, prior to anything extra being added.

You either trust the distribution, or you don't. If not, don't install it inthe first place.

yum update -y

JaredBusch

@Dashrender said in Building new Wordpress on CentOS 7:

Do the same thing for upgrades
type - yum upgrades
You might be prompted OK to download.
type - y

Couple things on this.

It is not a valid command.
- The correct command is yum upgrade
You only use update for CentOS 7 and newer normally.
- The update function is to perform minor version upgrades (7.1 to 7.2) and updates to installed packages (i.e. httpd,chrony, etc)
- The upgrade function is to perform a major version upgrade (7.X to 8.X)

JaredBusch

@Dashrender said in Building new Wordpress on CentOS 7:

hold

http://www.tecmint.com/things-to-do-after-minimal-rhel-centos-7-installation/2/#C9

This is for doing things to secure an installation and would/should be a guide of its own.

I would never bother changing the port. Obscurity is not security. All it does is annoy people trying to connect, the bots don't care.

scottalanmiller

@JaredBusch said in Building new Wordpress on CentOS 7:

@Dashrender said in Building new Wordpress on CentOS 7:

hold

http://www.tecmint.com/things-to-do-after-minimal-rhel-centos-7-installation/2/#C9

This is for doing things to secure an installation and would/should be a guide of its own.

I would never bother changing the port. Obscurity is not security. All it does is annoy people trying to connect, the bots don't care.

Same here, I only port change for other reasons, and only rarely. I do know that one person changes their port because they find that it lowers the hits to their log, but that's their only reason. It makes systems unnecessarily cumbersome for you and does nothing to stop an intruder.

Dashrender

We've had this discussion before, I posted this here so I could find it again when the time comes.

@JaredBusch I don't see any point in securing the server not be part of the entire process. As I continue on this thread, I will be including it. Of course these things will only apply to this specific situation, but it will be an end to end of my journey.

scottalanmiller

@Dashrender said in Building new Wordpress on CentOS 7:

@JaredBusch I don't see any point in securing the server not be part of the entire process. As I continue on this thread, I will be including it. Of course these things will only apply to this specific situation, but it will be an end to end of my journey.

Because they are rather different things.

How do you install Apache? - "yum -y install httpd"

How do you secure Apache? - Well, define your needs and let's talk about the degree to which you feel it needs to be locked down, what threats are pointed at you, what the value of the data is, etc.

One is concrete, one is not at all. They don't go together as a single thing.