Web Stack Deployment Notes
This host now mirrors the internal web stack used elsewhere on the network. The goal was to reproduce the nginx + PHP 7.4 FPM environment, add MariaDB for database workloads, and expose the latest phpMyAdmin release while keeping everything self-contained and suitable for an isolated lab.
nginx & PHP-FPM
nginx and PHP 7.4 FPM were installed straight from the Bullseye repositories to stay within the
distribution’s supported matrix. The default server block at /etc/nginx/sites-available/default
now proxies .php requests to /run/php/php7.4-fpm.sock and keeps the familiar
Debian layout so future package updates continue to apply cleanly. A temporary
/var/www/html/info.php was used to validate the interpreter after deployment.
MariaDB Server
MariaDB 10.5 (the Bullseye default) was selected for full compatibility with existing systems. The service is enabled on boot and ready to accept connections over the local socket, matching the phpMyAdmin configuration below. Additional hardening can be applied later without reinstalling.
phpMyAdmin 5.2.2
The latest phpMyAdmin build was unpacked under /usr/share/phpmyadmin and exposed only on the
default vhost at /phpmyadmin. Other virtual hosts inherit no phpMyAdmin locations, keeping the
UI hidden unless intentionally added. Configuration-based authentication signs in automatically with the
phpmyadmin@localhost user to satisfy the isolated-network requirement.
Operational Notes
- Remove
/var/www/html/info.phpafter finishing PHP testing to avoid leaking environment details. - Consider tightening the phpMyAdmin account (password or limited privileges) before exposing this host beyond the lab.
- When cloning the setup to new vhosts, copy the
/phpmyadminlocations only if you mean to share the tool. - Services can be managed as usual:
systemctl reload nginx,systemctl restart php7.4-fpm, andsystemctl status mariadb.