Here is the EC2 setup:
- Amazon Linux AMI
- LAMP
- SFTP (e.g., users jdoe, jsmith, etc)
- Virtual Hosts (e.g., /mnt/www/site1.com, /mnt/www/site2.com, etc)
I've been able to get Wordpress installed and running. However, the problem is that the auto-updating doesn't work. Setting up FTP is out of the question since it defeats the purpose of setting up SFTP in the first place. Also, the solutions that I came across all seem to require insecure settings. The primary Google hit is at the following link: http://www.chrisabernethy.com/why-wordpress-asks-connection-info/ As far as I can gather, the two primary suggestions are to either chown the WP directory or chmod 777 the WP install. Neither seem very secure after much reading so I'm at a loss at what is the best practice to get around the auto-updating problem.
Suggestion 1 (apache runs as httpd or apache):
# chown -R httpd: /mnt/www/site1.com
Suggestion 2
# chmod 777 /mnt/www/site1.com
Both of the above suggestions work but, as mentioned earlier, neither seem secure. I also tried the suggestions per WP docs to set directories to 755 and files to 644 but that didn't help to make auto-updating work. My best guess is that it's a permissions issue but am not sure where I'm getting things confused.
What is the best practice to get WP auto-updating to work?
Any advice will be much appreciated. Thanks in advance!