Comment by bsder
3 years ago
> I also ran mysql_secure_installation on my Ghost server to harden up the MySQL server. This does a couple of things to make it harder for people to compromise your SQL database (which is initially set up in a development mode), like disabling remote login as root.
WTF!
Why in the world aren't the defaults set to "secure by default"? Why in the world would DigitalOcean create a Ghost droplet that wasn't secured out the wazoo?
And, looking at what she went through, self-hosting this stuff is still far, far too stupidly difficult.
Honestly, I wish more self hosted stuff defaulted to using sqlite purely to reduce the complexity for simple deployments.
Ghost started with sqlite back in the days, I'm not sure why they migrated away :/