I'm blogging about Emacs, Drupal, php and exciting subjects
For years, convenience has been the driving force behind the modern internet. Cloud services became easier than running servers yourself, social media replaced independent websites, and smartphones turned into centralized gateways for communication, banking, entertainment, and work. Most people accepted this tradeoff without thinking too deeply about the long-term consequences.
For many Linux users, distributions such as Ubuntu, Debian, Fedora, and Arch Linux are simply the way Linux works. You install the operating system, configure a few settings, install software, and start using the machine. The thousands of components that make the system function remain hidden behind installers, package managers, and automation.
This is how you enable logging in MySQL
SET GLOBAL general_log=1;
SET GLOBAL general_log_file='/var/log/mariadb.log';
SET GLOBAL slow_query_log_file='/var/log/mariadb-slow.log';
SET GLOBAL slow_query_log=1;
Docker has fundamentally changed how PHP applications are deployed. Modern Symfony, Laravel, and custom PHP systems increasingly rely on containers for local development, CI/CD pipelines, horizontal scaling, and production infrastructure consistency.
But Docker has also created a dangerous misconception inside the PHP ecosystem:
PHP-FPM has become the standard execution model for modern PHP infrastructure. Whether applications run on bare metal servers, inside Docker containers, or in Kubernetes clusters, PHP-FPM usually sits directly behind Nginx and processes every dynamic request entering the application stack.
Introduction: Docker Security Is Not Automatic
Docker has become a standard deployment tool for PHP applications, especially in Symfony and modern microservice-based architectures. However, while Docker improves consistency and deployment speed, it does not automatically guarantee security.
Modern PHP infrastructure has evolved far beyond the traditional model of deploying a small application onto a single Linux server and exposing it directly to the internet.
Modern PHP applications rarely fail because of a simple SQL injection vulnerability or a missing input validation rule alone. Real-world compromises increasingly occur at the infrastructure layer through exposed services, weak deployment pipelines, leaked credentials, misconfigured containers, vulnerable dependencies, or poorly isolated application environments.
Choosing the right infrastructure automation platform is one of the most important decisions organizations make when scaling server management and DevOps workflows. Two of the most widely used configuration management tools are Puppet and Ansible.
SSL certificate problems are among the most common and frustrating issues administrators encounter when managing Puppet infrastructure. Puppet relies heavily on certificate-based authentication between agents and the Puppet server, and even minor certificate problems can prevent entire infrastructure environments from receiving configuration updates.
Subscribe to Linkhub