Primary domain question

yes, do like that for safety backup. One-compromise site, that's user-home dir can't be trust anymore.
 
I'd put it under a separate user too, mostly for the reason Ohm J hinted at. Admin is the account with full panel rights, so if a site running from it gets compromised (old WordPress plugin, leaked FTP password), it's sitting in the same home and behind the same login as your admin account. With a normal user the damage stays in that user's home, and you can suspend, move or restore that account on its own without touching admin.
If the domain is only there so the server hostname gets a valid cert, it doesn't need to live under any user. The hostname certificate is handled separately from user domains, so I'd check that before adding it anywhere.
 
Create a separate User as others have said is best practice. That's the great feature of Directadmin, that is the 2 accounts given on a personal licence, just for this reason. Yes you can use it for 2 users/domains etc, but it's at your own risk.
 
(old WordPress plugin, leaked FTP password)
You can have a differnt FTP password than the admin password on the admin account to prevent admin password leaking.
My collegue uses a domain on it but just for the name and ns settings and such. It's fairly static so no WP leaks.
If you want to be safer, it's indeed better to use a seperate account reseller or user.
 
I’ve moved the primary domain to a separate user. From now on, I’ll use the admin user solely for administration, without any domains attached to it. Thanks
 
Back
Top