Going to Add:<\/p>\n\n\n\n
- \n
- Apache<\/li>\n\n\n\n
- MariaDB<\/li>\n\n\n\n
- php8<\/li>\n\n\n\n
- phpMyAdmin<\/li>\n<\/ul>\n\n\n\n
Let’s get started and Install apache2, run the following commands:<\/p>\n\n\n\n
$ sudo apt install apache2<\/code><\/pre>\n\n\n\n$ sudo ufw app list<\/code><\/pre>\n\n\n\nYou should see Apache, Apache Full, and Apache Secure and depending on your particular setup, you may see more. I ran sudo ufw status right away and it is inactive, however, we will still run the following command:<\/p>\n\n\n\n
$ sudo ufw allow in \"Apache Full\"<\/code><\/pre>\n\n\n\n$ sudo ufw status<\/code><\/pre>\n\n\n\nOnto installing MariaDB.<\/p>\n\n\n\n
$ sudo apt update<\/code><\/pre>\n\n\n\n$ sudo apt install mariadb-server<\/code><\/pre>\n\n\n\n$ sudo mysql_secure_installation<\/code><\/pre>\n\n\n\nTHIS TIME:
First Question: Set a Password, I have been having issues (could just be the fact of too many passwords too many servers), for dev, simple but strong. (Set Password)
Second Question: NO (Switch authentication)
Third Question: NO (Change Password)
Fourth Question: YES (Remove Anonymous User)
Fifth Question: YES (Disallow root login remotely?)
Sixth Question: YES (Remove Test DB)
Seventh Question: YES (Reload Privilege)
That should complete it.
<\/p>\n\n\n\n$ sudo systemctl status mysql<\/code><\/pre>\n\n\n\nOutput:<\/p>\n\n\n\n
\u25cf<\/strong> mariadb.service - MariaDB 10.11.8 database server\n Loaded: loaded (\/usr\/lib\/systemd\/system\/mariadb.service; enabled<\/strong>; preset: enabled<\/strong>)\n Active: active (running)<\/strong> since Sun 2025-03-02 13:55:25 PST; 22min ago\n Docs: man:mariadbd(8)\n https:\/\/mariadb.com\/kb\/en\/library\/systemd\/\n Main PID: 34436 (mariadbd)\n Status: \"Taking your SQL requests now...<\/strong>\"\n Tasks: 9 (limit: 61037)\n Memory: 78.8M (peak: 82.4M)\n CPU: 1.055s\n CGroup: \/system.slice\/mariadb.service\n \u2514\u250034436 \/usr\/sbin\/mariadbd\n<\/code><\/pre>\n\n\n\nNot sure if that even worked correctly, it you get stuck, Ctrl + C to get back to the command prompt.<\/p>\n\n\n\n
$ sudo mysqladmin version<\/code><\/pre>\n\n\n\nOutput:<\/p>\n\n\n\n
mysqladmin Ver 10.0 Distrib 10.11.8-MariaDB, for debian-linux-gnu on x86_64<\/code><\/pre>\n\n\n\nNow lets get php8 installed:<\/p>\n\n\n\n
$ sudo apt install php libapache2-mod-php php-mysql phpmyadmin<\/code><\/pre>\n\n\n\nWhen prompted “Configuring phpmyadmin” make sure you select the Web server to reconfigure automatically as the one we installed, which is apache2. Press space to add a * and <tab> to <Ok>.<\/p>\n\n\n\n
Select <Yes> to Configure database for phpmyadmin.<\/p>\n\n\n\n
I (once again) left application password for phpmyadmin blank.<\/p>\n\n\n\n
Open your Favorite web browser and navigate to localhost and you should see a page that says—<\/p>\n\n\n\n
It works! (usually wrapped in an orange banner)<\/p>\n\n\n\n
Now to cleanly setup phpMyAdmin.<\/p>\n\n\n\n
$ sudo mysql<\/code><\/pre>\n\n\n\nEnter your sudo password. You should be at the following prompt.<\/p>\n\n\n\n
MariaDB [(none)]> <\/code><\/pre>\n\n\n\nNow we create a user for phpmyadmin!<\/p>\n\n\n\n
CREATE USER 'your_username'@'localhost' IDENTIFIED BY 'your_password';<\/code><\/pre>\n\n\n\nMake sure you use your username and your password. I know its funny seeing your password on the screen, but once this is done, it’s set, remember, it is independent of your system password, so if you change your system password, your MariaDB password is not affected.<\/p>\n\n\n\n
Output<\/p>\n\n\n\n
Query OK, 0 rows affected (0.013 sec)<\/strong>\n\nMariaDB [(none)]><\/code><\/pre>\n\n\n\nGrant privilege:<\/p>\n\n\n\n
GRANT ALL PRIVILEGES ON *.<\/em>* TO 'your_username'@'localhost' WITH GRANT OPTION;<\/code><\/pre>\n\n\n\nAgain, change your_username to your actual user name.<\/p>\n\n\n\n
FLUSH PRIVILEGES;<\/code><\/pre>\n\n\n\nEXIT;<\/code><\/pre>\n\n\n\nYou can test by navigating to localhost\/phpmyadmin in your web browser and using your credentials to login.<\/p>\n\n\n\n
The Following you can skip if you don’t want to store your password in a config file and is very insecure, but in a development environment it is useful.<\/h4>\n\n\n\n
Let’s edit the phpMyAdmin configuration.<\/p>\n\n\n\n
The Following In summary:<\/p>\n\n\n\n
If you’re comfortable with being prompted for your username and password each time, the current setup is fine and more secure.
If you want automatic login, you can switch to config authentication, but be aware of the security risks.<\/p>\n\n\n\nsudo nano \/etc\/phpmyadmin\/config.inc.php<\/code><\/pre>\n\n\n\nFind the $cfg[‘Servers’][$i][‘auth_type’] line and ensure it’s set to config:<\/p>\n\n\n\n
$cfg['Servers'][$i]['auth_type'] = 'config';<\/code><\/pre>\n\n\n\nAdd the username and password you created:<\/p>\n\n\n\n
$cfg['Servers'][$i]['user'] = 'your_username';
$cfg['Servers'][$i]['password'] = 'your_password';<\/code><\/pre>\n\n\n\nReplace your_username and your_password with the credentials you set in MariaDB.<\/p>\n\n\n\n
Restart Apache:<\/p>\n\n\n\n
sudo systemctl restart apache2<\/code><\/pre>\n\n\n\nYou can now navigate to localhost\/phpmyadmin and be automatically logged in. <\/p>\n\n\n\n
This method is great if your in a development environment and don’t want to logon to phpmyadmin every time you open it. However, from what I understand, if you do this in a production environment (I am not sure if phpmyadmin would even be running in this type of situation) this will allow anyone to open phpmyadmin with your credentials.<\/p>\n\n\n\n
<\/p>\n\n\n\n
Final Things I did to work with my environment.
First thing, make a symlink to my project folder in my home directory.<\/p>\n\n\n\nsudo ln -s \/home\/$USER\/my-web-project \/var\/www\/html\/my-web-project<\/code><\/pre>\n\n\n\nMake sure Apache can read and write to my local directory.<\/p>\n\n\n\n
sudo chmod -R 755 \/home\/$USER\/my-web-project<\/s>\nsudo chmod -R 775 \/home\/$USER\/my-web-project\n\nsudo usermod -aG www-data yourusername\nsudo chgrp -R www-data \/var\/www\nsudo chmod -R g+w \/var\/www\n\nnewgrp www-data\n\nLogout and back in<\/code><\/pre>\n\n\n\nUse Access Control Lists (ACLs):<\/strong><\/p>\n\n\n\n
ACLs provide more granular control over file permissions.<\/p>\n\n\n\n
Set ACL:<\/strong> Bash<\/p>\n\n\n\n
sudo setfacl -R -m u:your_username:rwx \/var\/www\/html\nsudo setfacl -d -m u:your_username:rwx \/var\/www\/html<\/code><\/pre>\n\n\n\nExplanation:<\/strong><\/p>\n\n\n\n
setfacl<\/code> modifies ACLs.<\/p>\n\n\n\n-R<\/code> applies the changes recursively.<\/p>\n\n\n\n-m u:your_username:rwx<\/code> grants read, write, and execute permissions to your user.<\/p>\n\n\n\n-d<\/code> sets the default ACL, so new files and directories will inherit the permissions.<\/p>\n\n\n\nView ACLs:<\/strong> Bash<\/p>\n\n\n\n
getfacl \/var\/www\/html<\/code><\/code><\/pre>\n\n\n\nACLs are generally preferred over fully changing the group permissions.<\/p>\n\n\n
<\/div>