HTTP

• Security

Basics

• http://en.wikipedia.org/wiki/Httpd
• http://httpstatus.es/

• http://accs-net.com/hosts/hostsforlinux.html
• http://hosts-file.net/

• HTTPie is a CLI, cURL-like tool for humans

• httpbin(1) - HTTP Request & Response Service

User and group

See also *nix#Users

• What user should apache and PHP be running as? What permissions should /var/www files have?

• http://serverfault.com/questions/260756/allow-scp-ssh-for-www-data-user

Servers

Nginx

• nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server
• The Architecture of Open Source Applications (Volume 2): Nginx

• Resources

Configuration

• Configuration
• FullExample
• HttpRewriteModule - rewriting urls
• HttpAuthBasicModule - for directory passwords
• Pitfalls

Site folder location can vary.

/var/www
  debian
/etc/nginx/html
  arch linux

Site setup

Create 'Server Block' (vhost) config file in

/etc/nginx/sites-available

and later ln -s them in

/etc/nginx/sites-enabled

• ServerBlockExample - Basic examples
• FcgiExample - FastCGI example. Keep seperate and include.
• http://wiki.nginx.org/Wordpress
• https://wiki.archlinux.org/index.php/PhpMyAdmin#NGINX_Configuration

Enable logging in vhost conf;

error_log /var/log/nginx-vhostnamehere.log error;

• http://agentzh.org/misc/nginx/agentzh-nginx-tutorials-enuk.html

Modules

• Nginx modules must be selected during compile, run-time selection of modules is not currently supported.

• HttpLimitConnModule - This module makes it possible to limit the number of concurrent connections for a defined key such as, for example, an ip address.

Tools

• https://github.com/perusio/nginx_ensite - nginx_ensite and nginx_dissite for quick virtual host enabling and disabling

• http://www.anilcetin.com/convert-apache-htaccess-to-nginx/

Apache

• Apache HTTP Server

• Stupid htaccess Tricks

Other

• http://monkey-project.com/

Performance

• http://stevesouders.com/efws/
• http://www.portent.com/blog/design-dev/how-we-made-portent-com-really-freaking-fast.htm

• http://thomashunter.name/blog/a-primer-on-web-caching/

• https://developers.google.com/speed/docs/best-practices/caching#LeverageBrowserCaching

• http://www.mnot.net/cache_docs/

• http://blitz.io/
• http://serverfault.com/questions/350062/the-strange-case-of-mr-time-to-first-byte

• https://www.varnish-cache.org/

Web server logs

Combined Log Format

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" combined

old skool;

• http://www.webalizer.org/
• http://awstats.sourceforge.net/

Apache

• http://httpd.apache.org/docs/1.3/logs.html

Nginx

• http://wiki.nginx.org/HttpLogModule

error_log  /var/log/nginx/domain.name/error.log;
access_log  /var/log/nginx/domain.name/access.log;

• http://articles.slicehost.com/2010/8/27/reading-nginx-web-logs
• http://gadelkareem.com/2012/07/01/nginx-error-log-reader/

GoAccess

• GoAccess is an open source real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems. It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly.
  • man goaccess

Control panels

• http://www.virtualmin.com/
• http://www.webmin.com/

Analytics

Piwik

• Piwik is downloadable, Free/Libre (GPLv3 licensed) real time web analytics software. It provides you with detailed reports on your website visitors; the search engines and keywords they used, the language they speak, your popular pages, and much more.
  • http://piwik.org/latest.zip
  • Trac

• Installation & Optimization
  • Nginx configuration for Piwik [1]

• User Guide
• Log Analytics - combined format logs (apache, nginx)

• Plugins

Google

• Google Analytics