Say you have a server with several apps. Those are your own projects
in your own machine, not shared hosting.
In Apache + Mongrel I normally had a user account per app, and a vhost
per app. Mongrels were launched by the corresponding user, so they run
with his regular permissions. Since Apache talked to the apps through
mod_proxy_balancer everything was fine.
In mod_rails there’s a single global user, that user is not per vhost.
Would you switch to a single system user and have all the apps in his
home? Would you base permissions on Unix groups and chmod whatever you
need? What do you recommend?
We use mod-rails (passenger) and we followed the guidlines in the
documentation. it works as follows: apache uses the user account which
has been given the ownership of environment.rb of the application. so
you can make an account for each application. also make sure to set the
propper permissions for the logfiles.
you can find all of this in detail in de documentation
good luck
remco
Xavier N. wrote:
Say you have a server with several apps. Those are your own projects
in your own machine, not shared hosting.
In Apache + Mongrel I normally had a user account per app, and a vhost
per app. Mongrels were launched by the corresponding user, so they run
with his regular permissions. Since Apache talked to the apps through
mod_proxy_balancer everything was fine.
In mod_rails there’s a single global user, that user is not per vhost.
Would you switch to a single system user and have all the apps in his
home? Would you base permissions on Unix groups and chmod whatever you
need? What do you recommend?