Vesta Control Panel - Forum

Let's Encrypt is scheduled to go live this month or October. As you might know it's a command line tool, so it would be totaly awesome if Vesta would embed it. How awesome (and save) would that be? Activate SSL support in the Control Panel and instantly get a valid certificate. Are you guys allready...

Isn't Vesta already shipped with Apache 2.4? I tought mine was 2.4. Never did anything special, just updating Ubuntu.
I believe you can upgrade everything independet of Vesta

tjebbeke wrote:In this dir you can find the templates
/usr/local/vesta/data/templates/web/nginx

Thanks, I found them! Turns out I had to use the apache config-files to make it work. Sometimes I'm a bit confused as for what goes by Nginx and what goes by Apache.

Thanks for the help. Problem solved.

Not exactly an answer to the question? Well, I don't really undersstand your final goal and ask some ;-) Block people from showing my websites in iframes, like Google and Facebook do. That can be done by adding the header from my first post to the server section of nginx config files. Usually this ...

Not exactly an answer to the question? I don't know in which config-file I have to put it to get it applied to every website. Every site has it's own config file in the home directory, there is a vesta.conf in the conf.d in the nginx conf folder, there's a ipaddress.conf file, and there is the nginx...

Hello, I'm sorry, this is going to be a very stupid question. I'm totaly lost in all the config files for VestaCP. I want to block áll websites on my server to be loaded from inside a iframe. For example like this (Nginx): add_header X-Frame-Options "SAMEORIGIN"; But where do I add this, so that eve...

That one is enabled by default by Vesta, but doesn't seem to work as described in your link. It's indeed true I can't access the stuff other users own, but I can access all other files on the server. That just seems odd to me.

Is it just me, or is it extremely dangerous to use SFTP with VestaCP? I found out SFTP is enabled for everybody by default, also when the SSH-access is set to 'nologin' in the user settings. Fine, I think vsftpd is handling this? Looked good for me, SFTP is much more secure than FTP and I would love...

matheusazevedo wrote:

skurudo wrote:You use one username for many databases?

Yes, I use the same username for all databases

Well, if you just stop doing that and give every database his own unique user, your problem is solved.

I had this once. Wordpress is under heavy attack all the time. I would strongly reccomend to follow all these steps: http://codex.wordpress.org/Hardening_WordPress . But keep in mind: putting wp-config one folder higher as they say, doesn't work anymore if you use apache basedir and nginx hosting as...