• Authentication Database (PostgreSQL)
  • User and group tables
  • Authentication configuration
  • Servlet container realm configuration

• JSPWiki Application
  • Directory layout and permissions
    • WAR file
    • Wiki pages
    • Wiki logs

• Optimizations
  • Connecting Apache 2 to Tomcat
  • Serving static content from Apache
  • Pre-compiling JSPs
  • Running Tomcat & JSPWiki with a Security Manager

• Deployment tools
  • SSH agent
  • Ant scripts

This is just a rough outline. I will be fleshing this out over the next few weeks. -- Andrew Jaquith

Comments and Discussion:

Operating system and servlet container

Host access

Directory layout

Runtime security

Runtime users

Startup scripts

Authentication

Container-managed authentication

Service minimization

Tomcat hardening

File permissions

Servlet logs

Servlet configuration directory

Host-based firewall

IPTables example

PostgreSQL Database

User and group tables

Authentication configuration

Servlet container realm configuration

JSPWiki Application

Directory layout and permissions

WAR file

Wiki pages

Performance tweaking

• FAQCaching