Document WHM, cPanel and WordPress!

assets/apprentice/wordpress/apache.conf

@@ -0,0 +1,15 @@
+<VirtualHost yowpdomain.example.com:443>
+  # Dotfiles
+  <FilesMatch "^\.">
+    Deny from all
+  </FilesMatch>
+  # Dotdirs
+  <DirectoryMatch "^\.|\/\.">
+    Deny from all
+  </DirectoryMatch>
+
+  <Location /xmlrpc.php>
+    Allow 127.0.0.1
+    Deny from all
+  </Location>
+</VirtualHost>

assets/apprentice/wordpress/nginx.conf

@@ -0,0 +1,32 @@
+server {
+  listen 443 http2 ssl;
+  server_name yowpdomain.example.com;
+
+  index index.php;
+
+  location / {
+    try_files $uri $uri/ /index.php?$args;
+  }
+
+  location ~ \.php$ {
+    fastcgi_pass unix:/var/run/php/php-fpm.sock;
+    fastcgi_index index.php;
+    include fastcgi_params;
+  }
+
+  # hide any hidden files
+  location ~ /\. {
+    deny all;
+  }
+  # except for .well-known
+  location ^~ /.well-known {
+    allow all;
+  }
+
+  # limit xmlrpc access
+  # this is a management API
+  location ~* /xmlrpc.php$ {
+    allow 127.0.0.1;
+    deny all;
+  }
+}

content/blog/apprentice/_index.en.md

@@ -15,7 +15,7 @@ This section of my blog serves as an index of technologies I've learned or becam
 It also serves the purpose of the required documentation apprentices in Norway are supposed to do. :flushed:
 
 Here are lists of stuff I'll be writing about here;
-:x: not started :construction: marks work in progress :white_check_mark: marks complete!
+:x: marks not started :construction: marks work in progress :white_check_mark: marks complete!
 
 ## Programming
 ### Python
@@ -43,6 +43,6 @@ Here are lists of stuff I'll be writing about here;
 - :x: Active Directory :dizzy:
 
 ## The WHM saga (shortie)
-- :construction: Wordpress :eyes:
-- :construction: cPanel :shit:
-- :construction: WHM :ok_hand:
+- :white_check_mark: Wordpress :eyes:
+- :white_check_mark: cPanel :shit:
+- :white_check_mark: WHM :ok_hand:

content/blog/apprentice/cpanel.en.md

@@ -1,14 +1,26 @@
 ---
 date: 2022-06-20T14:07:02Z
-draft: true
+draft: false
 aliases: []
-categories: ['various']
-series: []
-tags: ['various']
+categories: ['documentation']
+series: ['apprentice', 'hosing']
+tags: ['hosting', 'tech']
 chroma: false
 toc: true
 title: cPanel
 description: cPanel is a server interface provided by many hosting providers for web based management of the servers by their customers
 ---
 
-I think anyone who uses cPanel should be aware of [WHM](../whm).
+I think anyone who uses cPanel should be aware of [WHM](../whm)/Web Host Manager.
+Although cPanel may run completely on its own, but usually you find its running with WHM.
+Meaning that whoever sells you the cPanel access sets it up through WHM.
+
+Alone cPanel may be pretty powerful depending on what access you're granted.
+Often hosting providers will limit you to only access the files of your web-root and settings for additional services like e-mail and DNS.
+But cPanel may even allow for terminal access on the Linux host.
+Because it's "shared hosting", usually anyway.
+Meaning you run WHM on Linux box and setup cPanel accounts that are actual Linux users.
+As WHM uses built-in Linux security for access control on the host.
+
+cPanel is also capable of hosting all sorts of different types of web-apps.
+Even though it's often configured to only allow PHP, where you'd likely see WordPress installs.

content/blog/apprentice/mikrotik.en.md

@@ -1,6 +1,6 @@
 ---
 date: 2022-06-08T10:34:42Z
-draft: false
+draft: true
 aliases: []
 categories: ['various']
 series: []

content/blog/apprentice/whm.en.md

@@ -1,14 +1,25 @@
 ---
 date: 2022-06-20T14:07:06Z
-draft: true
+draft: false
 aliases: []
-categories: ['various']
-series: []
-tags: ['various']
+categories: ['documentation']
+series: ['apprentice', 'hosing']
+tags: ['hosting', 'tech']
 chroma: false
 toc: true
 title: WHM
-description: Web Host Manager, this is the secret sauce for many companies that do shared Linux server web hosting with cPanel
+description: Web Host Manager, this is the secret sauce for many companies that do shared Linux web hosting with cPanel
 ---
 
 WHM/Web Host Manager is the partner/backend admin panel for [cPanel](../cpanel).
+It's made for making shared web hosting super easy.
+WHM uses a bunch of server software under the hood for managing DNS, e-mails, web-servers and more.
+With WHM, it's super easy managing a whole-bunch of Apache "virtual hosts".
+One for each cPanel.
+
+WHM also supports having WHM "partner" accounts out of the box!
+This means that the company doing shared hosting with WHM may have partners that also have access to the WHM.
+And sells cPanel accounts on the same servers.
+
+You may also change the cPanel branding through WHM.
+This is of course for reselling purposes.

content/blog/apprentice/wordpress.en.md

@@ -1,11 +1,11 @@
 ---
 date: 2022-06-20T14:06:54Z
-draft: true
+draft: false
 aliases: []
 categories: ['documentation']
 series: ['apprentice', 'cms']
 tags: ['wordpress', 'tech', 'cms']
-chroma: false
+chroma: true
 toc: true
 title: WordPress
 description: The worlds most popular and whackiest web page Content Management System
@@ -45,3 +45,9 @@ When it comes to securing a WordPress setup, it's important to make sure the act
 Here I'll showcase some example nginx and Apache configs for a hardened WordPress installation.
 If your WordPress is installed in some shared hosting solution.
 Then it's up to the hosting provider to configure the web server and potentially php-fpm or something properly.
+
+Nginx site for hardened WordPress;
+{{< highlight nginx >}}{{% asset "apprentice/wordpress/nginx.conf" %}}{{< /highlight >}}
+
+Apache virtual host directives for a simillar setup;
+{{< highlight aconf >}}{{% asset "apprentice/wordpress/apache.conf" %}}{{< /highlight >}}