more precisely: we resolve the publish_path so it's not relative, using realpath() without this, relative would end up in the apache config, breaking vhosts