News for hackers. Stuff that matters.

A comment on Ask HN: What should I use instead of Heroku?. Parent comment

Re:Ask HN: What should I use instead of Heroku? by tyingq on Saturday May 07, 2022 @08:10AM (#31293892)
Heroku does isolate the application somewhat. You would have to add some amount of itables configuration, ssh setup, web server config, "don't run everything as root", and so on to your list. All doable of course, but there's a reason people pay for things like heroku.
[ Parent | on HN ]
Re:Ask HN: What should I use instead of Heroku? by TekMol on Saturday May 07, 2022 @08:12AM (#31293899)
You don't have to do any of those security wise.

On a plain Debian installation, do "apt install php", throw your files into /var/www/html/ and your application is up and running in a secure fashion.

[ Parent | on HN ]
Re:Ask HN: What should I use instead of Heroku? by christophilus on Saturday May 07, 2022 @08:48AM (#31294085)
You do need to at least: set up automatic security patching (a one-line command), turn off password authentication, disable root, and probably run ufw or something. It’s not hard, but it is slightly more effort than Heroku.
[ Parent | on HN ]
Re:Ask HN: What should I use instead of Heroku? by D13Fd on Saturday May 07, 2022 @06:48PM (#31299342)
The hard part is making sure this random list of things I found on the internet is sufficient to keep the site secure, and taking the blame if it turns out not to be.
[ Parent | on HN ]
Re:Ask HN: What should I use instead of Heroku? by Handytinge on Thursday May 12, 2022 @08:01PM (#31361563)
As opposed to trusting the random black box company on the internet? Don't you take the blame still for picking a company whose product you are unable to do due diligence on?
[ Parent | on HN ]
Re:Ask HN: What should I use instead of Heroku? by tyingq on Saturday May 07, 2022 @08:54AM (#31294118)
The OP wanted updates to happen in some automated fashion from a git repo. Also, didn't say specifically, but I'm guessing they wanted https and certificates.
[ Parent | on HN ]
Re:Ask HN: What should I use instead of Heroku? by slowwriter on Saturday May 07, 2022 @09:04AM (#31294176)
Indeed. Besides GitHub integration, Automatic Certificate Management (ACM) is actually a feature I really appreciate on Heroku. Some might describe it as glorified Let’s Encrypt but nonetheless I appreciate things like that just working out of the box
[ Parent | on HN ]