Right now I've got a basic lamp + bitcoin (lampcoin machine setup in SUSE studio. Haven't published yet but was figuring before publishing I should make sure there's no obvious mistakes I'm making.
What you're saying is good advice and before I'd launch a website of any sizable amount I'd be sure to follow them. But I was hoping to create a small box that will allow people to develop their web apps but develop them in a reasonably secure manner. If you've got some time I'd be more than happy to have your thoughts on the build.