Paketinstallation:
aptitude install apache2-mpm-worker apache2-suexec php5-cgi libapache2-mod-fcgid
aptitude install php5-curl php5-gd php5-mcrypt php5-mysql


Modulaktivierung:
a2enmod fcgid suexec rewrite


Verzeichnisstruktur:
#die configs dieses vhosts
/var/www/pwwc/conf

#hier landet der User wenn er sich per FTP einloggt
/var/www/pwwc/htdocs

#das ist die DocumentRoot für den Apache
/var/www/pwwc/htdocs/public

#custom logs für diesen vhost
/var/www/pwwc/logs

#der eigene tmp Ordner
/var/www/pwwc/tmp

#der eigene Sessions Ordner
/var/www/pwwc/sessions


Userverwaltung:
useradd -s /bin/false -d /var/www/pwwc/htdocs pwwc
adduser www-data pwwc


Verzeichnisstruktur anlegen:
mkdir -p /var/www/pwwc/htdocs/public
mkdir /var/www/pwwc/logs /var/www/pwwc/conf
mkdir /var/www/pwwc/sessions /var/www/pwwc/tmp


vHost anlegen:
nano /etc/apache2/sites-available/pwwc

<VirtualHost *:80>
    ServerName example.de
    ServerAdmin admin@example.de

    Include /etc/apache2/mods-available/fcgid.conf

    DocumentRoot /var/www/pwwc/htdocs/public
    SuexecUserGroup pwwc pwwc

    <Directory /var/www/pwwc/htdocs/public>
        FCGIWrapper /var/www/pwwc/conf/fcgid .php
        <FilesMatch \.php$>
        	SetHandler fcgid-script
        </FilesMatch>
        Options +ExecCGI -Indexes
        Order allow,deny
        allow from all
        AllowOverride All
    </Directory>

    LogLevel warn
    ErrorLog /var/www/pwwc/logs/error_log
CustomLog "| /usr/sbin/rotatelogs /var/www/pwwc/logs/access_log.%Y.%m.%d 86400" combined
</VirtualHost>


fcgi Starter anlegen:
nano /var/www/pwwc/conf/fcgid

#!/bin/sh
export PHPRC="/var/www/pwwc/conf/"
exec /usr/bin/php5-cgi


vHost php.ini:
cp /etc/php5/cgi/php.ini /var/www/pwwc/conf/php.ini


vHost php.ini ändern:
nano /var/www/pwwc/conf/php.ini
open_basedir = /var/www/pwwc/htdocs/public:/var/www/pwwc/tmp/
upload_tmp_dir = /var/www/pwwc/tmp
session.save_path = /var/www/pwwc/sessions
session.gc_probability = 1
session.gc_diviso = 100 ; standard
session.gc_maxlifetime = 1440 ; standard


vHost php.ini ergänzen:
nano /var/www/pwwc/conf/php.ini
soap.wsdl_cache_dir = /var/www/pwwc/tmp


Rechteverwaltung:
chown root:pwwc /var/www/pwwc
chmod 750 /var/www/pwwc
chown pwwc:pwwc /var/www/pwwc/*
chmod 750 /var/www/pwwc/*
chown root:root /var/www/pwwc/logs
chown root:pwwc /var/www/pwwc/conf/php.ini
chmod 640 /var/www/pwwc/conf/php.ini
chown pwwc:pwwc /var/www/pwwc/conf/fcgid
chmod 750 /var/www/pwwc/conf/fcgid
chown -R pwwc:pwwc /var/www/pwwc/htdocs
find /var/www/pwwc/htdocs -type d -exec chmod 750 {} +
find /var/www/pwwc/htdocs -type f -exec chmod 640 {} +
chmod 750 /var/www/pwwc/htdocs


Immutable Bit setzen:
chattr +i -V /var/www/pwwc/conf/fcgid
chattr +i -V /var/www/pwwc/conf/php.ini


Immutable Bit entfernen:
chattr -i -V /var/www/pwwc/conf/fcgid
chattr -i -V /var/www/pwwc/conf/php.ini


Apache2 Config testen, neuladen, neustarten:
a2ensite pwwc
apache2ctl configtest
/etc/init.d/apache2 restart