Facilitate the installation of WordPress on the SRCF via a 1-click deploy on the control panel and a command line script for those who so choose.
Motivation
Current problem
The sysadmins must deal with compromised installs, folks get private details leaked and users get a scare, potentially discouraging them from playing around because their instance of WordPress was hacked. I suspect many will just label "manually installing things" as "not for them".
In line with an issue I saw in the OCF and us having discussed this in #hackday, I strongly believe that an easier path to installing WordPress would benefit our user base and cause the current sysadmin team less headaches.
Pros:
allows us to pre-define and set custom configs (like the weird FS stuff)
allows us to immediately secure the installation (make wp-config non world-readable, raven the admin page, auto updates)
lower barrier to entry to using the SRCF
doesn't preclude the user from sshing and getting to the nitty gritty details
My motivation in this last point is that a fraction of users who do install WordPress might be curious into learning more and might one day donate or become volunteers. We've already seen that even technically-skilled people install WordPress so I wouldn't dismiss this idea too quickly.
Alternatives considered
Do nothing, in which case the problems mentioned above continue
Managed WordPress, in which case we become WPaaS and there's people who have entire companies doing this
Explore another form of creating websites easily, I think this is great but WP powers 30% of the web and it's super convenient, well-known and easy to use. We should continue to support it.
Project/idea summary
Facilitate the installation of WordPress on the SRCF via a 1-click deploy on the control panel and a command line script for those who so choose.
Motivation
Current problem
The sysadmins must deal with compromised installs, folks get private details leaked and users get a scare, potentially discouraging them from playing around because their instance of WordPress was hacked. I suspect many will just label "manually installing things" as "not for them".
In line with an issue I saw in the OCF and us having discussed this in #hackday, I strongly believe that an easier path to installing WordPress would benefit our user base and cause the current sysadmin team less headaches.
Pros:
My motivation in this last point is that a fraction of users who do install WordPress might be curious into learning more and might one day donate or become volunteers. We've already seen that even technically-skilled people install WordPress so I wouldn't dismiss this idea too quickly.
Alternatives considered