Whitelisting IP Addresses

If you wish to restrict SSH access to your server using IP whitelisting, you will need to whitelist the following IP addresses to allow SpinupWP to connect to your server: 67.205.131.221 67.205.148.70 68.183.120.65 In the case that these IP addresses change in the future we will send out an email prior to any changes being…

PHP Disabled Functions

To help keep your WordPress sites secure, SpinupWP disables the following PHP functions by default: disk_free_space disk_total_space diskfreespace dl exec opcache_get_configuration opcache_get_status passthru pclose pcntl_alarm pcntl_exec pcntl_fork pcntl_get_last_error pcntl_getpriority pcntl_setpriority pcntl_signal pcntl_signal_dispatch pcntl_sigprocmask pcntl_sigtimedwait pcntl_sigwaitinfo pcntl_strerror pcntl_waitpidpcntl_wait pcntl_wexitstatus pcntl_wifcontinued pcntl_wifexited pcntl_wifsignaled pcntl_wifstopped pcntl_wstopsig pcntl_wtermsig popen posix_getpwuid posix_kill posix_mkfifo posix_setpgid posix_setsid posix_setuid posix_uname proc_close proc_get_status proc_nice…

Changing Nginx Settings

SpinupWP uses Nginx to serve web requests. The global nginx.conf file is located at /etc/nginx/nginx.conf. You should avoid editing this file unless you are sure you want to make a global change for every site on your server. When you create a site in SpinupWP, a new Nginx config is created for that site with…

Software Updates

All servers provisioned using SpinupWP will automatically install security updates daily. This reduces the likelihood that an attacker will be able to exploit a security vulnerability and is good security practice. Automatic security updates are handled by the unattended-upgrades package, which is installed and configured by SpinupWP. Often times a security update will require a…

Changing PHP Settings

PHP settings are controlled using php.ini files. When you deploy a server via SpinupWP, a default php.ini file is created with sensible default values. However, you are free to update these values. Each version of PHP has its own php.ini file, which is located here: /etc/php/{PHP_VERSION}/fpm/php.ini Any changes made to this file will impact all…

Increasing Server Timeout Limits

All SpinupWP servers are configured with a default timeout limit of 30 seconds. However, you may increase this limit if you are experiencing “504 Gateway Time-out” errors. This setting cannot be adjusted via the SpinupWP UI, so start by connecting to your server using a sudo user, then update your PHP and Nginx configs, as…

Connecting to your Database

Once you have created a database in SpinupWP you can manage the database in two ways: using the command line (CLI) or using a desktop app. Using the CLI To manage the database using the command line first you need to SSH to your server: ssh user@123.456.78.91 Once you are logged into your server you…

Using SSH Keys

To encourage security best practice in SpinupWP we disable SSH password authentication by default. Instead, authentication with your servers is done using SSH Keys. How Do SSH Keys Work? The Secure Shell (SSH) protocol allows you to securely connect and authenticate to remote servers over an unsecured network using end-to-end encryption. SSH keys provide a…

Understanding System Users

SpinupWP utilizes two different types of system users. These users allow you to safely and conveniently manage your servers and sites. Let’s take a look at each. Sudo Users Following security best practices, SpinupWP disables SSH access for the root user on all servers. Instead, you can add sudo users, which will have sudo access….

The SpinupWP Cache Daemon

The cache daemon is a little Go app we’ve written and deploy to every server to help with purging the page cache. The reason we need this daemon is an issue of file permissions. Each site runs a PHP pool as the site user but since cache files are owned by user www-data PHP cannot…