Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [best-practices]

Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

351 questions
2
votes
2 answers

Apache2.2 vhosts - disadvantages of using one file with many vhosts

As i am working with Apache2.2 more and more lately this thought crossed my mind (apologies if this seems a 'silly' question, still learning alot) Are there any blatant disadvantages if you use just one file in hosts-available to configure multiple…
Jake
  • 248
  • 2
  • 7
2
votes
1 answer

HPC Cluster (SLURM): recommended ways to set up a secure and stable system

I'm working with a SLURM driven HPC Cluster, containing of 1 control node and 34 computation nodes and since the current system is not exactly very stable I'm looking for guidelines or best practices on how to build such a cluster in a way that it…
basilikum
  • 217
  • 3
  • 11
2
votes
1 answer

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual departments, but also have a higher level…
mclark1129
  • 555
  • 2
  • 11
  • 28
2
votes
0 answers

Domain Controller's DNS NIC configuration

I've seen conflicting information on this online, but say you have an environment with two domain controllers: one Forest, one Site, one Domain; simple as it gets. How should each domain controller's NIC be configured with respect to DNS? Assuming…
gravyface
  • 13,957
  • 19
  • 68
  • 100
2
votes
1 answer

Seeking alternative to storing binaries in git for devops

I'm not sure how to ask this best practices question since I know many StackExchange users evidently think best practices are a bad thing ... We've got Salt and Vagrant configured to stand up servers with a variety of open source software. Some of…
bethesdaboys
  • 131
  • 1
2
votes
1 answer

What should I do if an necessary client application has to run on an older (vulnerable) framework?

A client needs to have .NET Framework 4 installed and not patched so their software running on their Windows 2008 R2 Server functions properly. This sparks the questions: When is it okay to house a vulnerable framework if their application is…
Zero
  • 315
  • 1
  • 5
  • 21
2
votes
3 answers

Is a dashed hostname preferrable to creating subdomains for an application and its environments?

I am working to standardize our DNS names for our various applications, and I proposed the following scheme: webappname.environment.system.company.tld So, my application named BackOffice in my production environment for the CreditReview system would…
arcain
  • 229
  • 1
  • 3
  • 9
2
votes
1 answer

Is it best practice to have mail sent from the root domain when the service is accessed via a subdomain name?

Running an outward facing server for contractors who's hostname is sub.example.com. The service needs to send mail to the contractors for various reasons (new projects, login details, etc). I have no intentions on making this machine an smtp server,…
MDMoore313
  • 5,581
  • 6
  • 36
  • 75
2
votes
2 answers

Can a Windows Server CA separate code-signing keys from keys for other purposes?

I am a software developer. My team encrypts the sensitive sections of our ASP.NET web.config files. aspnet_regiis.exe is used to manage the local key store, encrypt and decrypt. I want to build a quick key-manager tool to avoid remembering its…
Emyr
  • 153
  • 2
  • 7
2
votes
1 answer

Default NTFS permissions for shared folders

I'm looking for best practices around share files and there NTFS permissions. I'm upgrading servers from SBS 2003 to Server 2012 Standard and thought this would be a good opportunity to do our security groups and NTFS/Share permissions correctly. 1,…
Syntax
  • 225
  • 3
  • 9
2
votes
1 answer

Active Directory Domain Controller in Multiple Sites - Server 2012

So I'm not used to setting up DCs in multiple subnets/locations, I was hoping to get some guidance. I'm just messing with virtual servers at the time being. DC1 = Apollo DC2 = Cronos Pre-AD Config Firewall: Green -> 192.168.0.15 Purple ->…
Kyle Johnson
  • 163
  • 1
  • 2
  • 8
2
votes
1 answer

Is there a good reason to change session.save_path?

On shared hosting, we had occasional problems when the server's /tmp directory was full. Our hosting company suggested we change the session save path to be unique for each site. ini_set('session.save_path', DOCUMENT_ROOT . '/_SESSIONS/'); Yes,…
TRiG
  • 1,181
  • 3
  • 13
  • 30
2
votes
4 answers

Enabling Receive Side Scaling & IPsec Task Offload v2 on a Network Adapter

Running the Best Practice Analyzer on a Windows Server 2012 RTM (this virtual server runs on a hyper-v host), I receive two configuration warnings. Enable Receive Side Scaling (RSS) on a network adapter I run the following PS…
H A
  • 222
  • 1
  • 5
  • 13
2
votes
1 answer

Best way to override 1024 process ulimit

On CentOS distros, there is an /etc/security/limits.d/90-noproc.conf that sets a process limit for all users: # Default limit for number of user's processes to prevent # accidental fork bombs. # See rhbz #432903 for reasoning. * soft …
CamelBlues
  • 303
  • 4
  • 10
2
votes
1 answer

Best Practice for "fastcgi_pass" Directive Location in NGiNX

Is best to put the fastcgi_pass 127.0.0.1:9000 directive in the fastcgi_params file for NGiNX, or to explicitly state it in the location for \.php$? Or does it not really matter?
tacotuesday
  • 1,389
  • 1
  • 16
  • 27
1 2 3
…
23 24