What is LAMP stack
LAMP Stack is a web service stack based on PHP that can be used to create websites and web applications. LAMP is an acronym, and these stacks typically consist of the Linux operating system, the Apache HTTP Server, the MySQL relational database management system, and the PHP programming language. LAMP stack is built with Docker Compose.
What does LAMP stack include
A basic LAMP stack environment built using Docker Compose. It consists of the following:
- PHP FPM
- Apache / (Apache + WAF) / Nginx / (Nginx + WAF)
- MySQL / MariaDB
- Redis
- SMTP server
Web Server options:
- apache
- apache-waf
- nginx
- nginx-waf
Docker repositories:
Nginx
Nginx-WAF
phpMyAdmin
Database options:
- mysql
- mariadb
Who is using LAMP
- PHP developers
- Web developers
What are the benefits of using dockerized LAMP stack
- Numerous libraries and extensions available for Docker apps that are ready for integration
- A wide selection of professional developers to support your app at an affordable price, available due to the Docker Registry system popularity
- Facilitated upgrade to a new version provided by Docker containers
- Effortless app migration to another cloud provider
- A single OS holding multiple apps
- Easily portable docker containers
- CI / CD processes simplified setup
- Preinstalled SMTP, and Сertbot
- One-click SSL setup with the Status Panel
- Easy container management with Portainer
- Fast startup and better performance of the app
- Lower system overhead
- Linux operating system's preset settings, like network settings, preconfigured swap, and more.
- Secure servers updates
Number of servers required: 1 VPS
Companion apps
The ModSecurity (Modsec) plug-in module for Apache is an open-source web application firewall (WAF). It makes the users’ server security customization and configuration fast and effortless even for the beginners. Another demanded option of this WAF is real-time web traffic monitoring. Thus you get the possibility to detect and repel attacks immediately. Besides Apache, Modsec can be also used with Nginx and IIF.
Deploy WAF/ModSecurity for Nginx compiled with ModSecurity module + predefined OWASP CRS ( ModSecurity Core Rule Set) Version 3
knockd is a port-knock server. It listens to all traffic on an ethernet (or PPP) interface, looking for special knock sequences of port-hits. A client makes these port-hits by sending a TCP (or UDP) packet to a port on the server. This port need not be open -- since knockd listens at the link-layer level, it sees all traffic even if it's destined for a closed port. When the server detects a specific sequence of port-hits, it runs a command defined in its configuration file. This can be used to open up holes in a firewall for quick access.
Fail2ban scans log files and bans IPs that show the malicious signs. Highly recommended for simple VPS server setup
Portainer is a lightweight management UI which allows you to easily manage your different Docker environments (Docker hosts or Swarm clusters)
Minimal docker container management panel. Allows you to check the status and logs of all services of this stack. It also simplifies SSL setup and configuration.
Wazuh security service