I want encrypt my
/var/www folder so I and
apache had access.
How can I done this?
I tried use
ecryptfs, but my sites does not work.
Please write example, or link for manual.
You could use eCryptfs to do this.
You'd need to do this as the root user, though. Here's some instructions that would work:
And then you would need to login as root, and run ecryptfs-mount-private. Note that you will probably want to ensure that /var/www is not unmounted when root logs out. To do this, just
Full disclosure: I am one of the maintainers of the eCryptfs project.
However, since the key is unlocked on boot you still won't gain anything unless ofc if someone enters your serverhall, removes your disk and then tries to gain access to it w/o testing to put the disk into any other computer (of the same architecture) and tries to boot it up.
You COULD possibly do a full-disk encryption (bad idea since you won't be able to decrypt your computer via SSH) or so that you'll have to unlock the encryption, but then you've ended up with a server that cannot be rebooted without having to worry about maintenance afterwards.
I would suggest you to encrypt only the files in the
If you've already encrypted your home folder then you can easily point apache to read a subdirectory inside ~/ through a symlink.
That's how I set up my system. I created a symlink under
Find below my
Now you should add apache (www-data) to your group and viceversa:
I did it because I need to launch PHP scripts on the command-line from my user and apache still needs to read and write the same files (but I guess you can use setfacl).
Now you should change your home folder permissions and the permissions of your document root folder (in my case