{"action":"created","issue":{"url":"https://api.github.com/repos/liamjack/NginxAddSite/issues/1","repository_url":"https://api.github.com/repos/liamjack/NginxAddSite","labels_url":"https://api.github.com/repos/liamjack/NginxAddSite/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/liamjack/NginxAddSite/issues/1/comments","events_url":"https://api.github.com/repos/liamjack/NginxAddSite/issues/1/events","html_url":"https://github.com/liamjack/NginxAddSite/issues/1","id":368583690,"node_id":"MDU6SXNzdWUzNjg1ODM2OTA=","number":1,"title":"No php-fpm isolation","user":{"login":"jmaris","id":342289,"node_id":"MDQ6VXNlcjM0MjI4OQ==","avatar_url":"https://avatars0.githubusercontent.com/u/342289?v=4","gravatar_id":"","url":"https://api.github.com/users/jmaris","html_url":"https://github.com/jmaris","followers_url":"https://api.github.com/users/jmaris/followers","following_url":"https://api.github.com/users/jmaris/following{/other_user}","gists_url":"https://api.github.com/users/jmaris/gists{/gist_id}","starred_url":"https://api.github.com/users/jmaris/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jmaris/subscriptions","organizations_url":"https://api.github.com/users/jmaris/orgs","repos_url":"https://api.github.com/users/jmaris/repos","events_url":"https://api.github.com/users/jmaris/events{/privacy}","received_events_url":"https://api.github.com/users/jmaris/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-10-10T09:51:17Z","updated_at":"2018-10-28T16:04:20Z","closed_at":null,"author_association":"NONE","body":"Due to lack of Isolation, a security flaw in one site could give access to all sites.\r\n\r\nIt is recommended that each site has its own php-fpm socket, with php-fpm running as a seperate user per site. This mitigates some of the problem\r\n\r\nAlso hi"},"comment":{"url":"https://api.github.com/repos/liamjack/NginxAddSite/issues/comments/433718300","html_url":"https://github.com/liamjack/NginxAddSite/issues/1#issuecomment-433718300","issue_url":"https://api.github.com/repos/liamjack/NginxAddSite/issues/1","id":433718300,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMzcxODMwMA==","user":{"login":"jmaris","id":342289,"node_id":"MDQ6VXNlcjM0MjI4OQ==","avatar_url":"https://avatars0.githubusercontent.com/u/342289?v=4","gravatar_id":"","url":"https://api.github.com/users/jmaris","html_url":"https://github.com/jmaris","followers_url":"https://api.github.com/users/jmaris/followers","following_url":"https://api.github.com/users/jmaris/following{/other_user}","gists_url":"https://api.github.com/users/jmaris/gists{/gist_id}","starred_url":"https://api.github.com/users/jmaris/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jmaris/subscriptions","organizations_url":"https://api.github.com/users/jmaris/orgs","repos_url":"https://api.github.com/users/jmaris/repos","events_url":"https://api.github.com/users/jmaris/events{/privacy}","received_events_url":"https://api.github.com/users/jmaris/received_events","type":"User","site_admin":false},"created_at":"2018-10-28T16:04:20Z","updated_at":"2018-10-28T16:04:20Z","author_association":"NONE","body":"I was thinking on working on a similar script to take the following actions : \r\n- create a user and group\r\n- create a chroot jail for the site's SSH/sftp and allow only sftp access if requested (blocks access to filesystem)\r\n- create a mysql user and database for the site\r\n- create a php-fpm socket for the user limited to the www directory (inside the home directory of the user)\r\n- setup an nginx conf\r\n- do letsencrypt automatically\r\n\r\ncould also add a system that makes a backup of the dir and saves it offsite"}}
{"actor":{"display_login":"jmaris"}}