This repository provides a quick setup for a LAMP stack with optimized settings for low-footprint websites and hardening. The configuration is designed to be simple and easy to set up on a DigitalOcean droplet or similar server environments.
You can moidfy the typical PHP ini and Apache variables in the .env file before running the setup. Further variables be found in the Apache and PHP setup scripts within the 'setup' folder.
If you have already setup the site, simply modify the 99-* INI for PHP and zzz-* CONF files for Apache.
The barebones are put in place for you to start copying your files over to /var/www//public/
SSL can be setup. There is no cost for this service.
- Server running Debian 12 (or similar Linux distribution)
- Access to server via SSH
- Registered domain pointing (including www) to server IP for use with Certbot (for SSL)
- git required to pulldown repository
Before running the setup, ensure that .env file match your requirements. Make sure to check other configuration variables in the setup.sh file as well. The script has been tuned for low-footprint websites.
If you do not enter a domain name and cert type, the website creation and SSL certification will be skipped. Apache and PHP will still be setup but without a default site. Use 'local' for websites that are not used in production and 'live' for production websites.
Local certs are self-signed and live certs use CertBot.
Be careful with generating SSL certificates for the same domain too many times. LetsEncrypt has rate limiting enabled. Auto-renewal of SSL certificates is enabled.
Create as many websites as required:
./setup/setup_website.sh <domain>
To delete a website:
./setup/delete_website.sh <domain>
Paste the single line command. It will prompt to enter domain and email address:
echo ">>> Enter your domain: " && read DOMAIN && echo ">>> Enter cert type (local/live): " && read CERT_TYPE && sudo apt install git -y > /dev/null 2>&1 && cd ~ && git clone https://github.com/Amarjit/digital_ocean_cis_lamp.git && cd digital_ocean_cis_lamp && chmod +x setup.sh && ./setup.sh "$DOMAIN" "$CERT_TYPE"