Bastille template to install and configure the Apache HTTP Server with some sane defaults.
- httpd listens on ports 80 (HTTP) and 443 (HTTPS).
DocumentRootis/usr/local/www.- Some sane defaults:
- No directory listings by default (
-Indexes). - Follow symlinks only if owner matches (
+SymLinksIfOwnerMatch). - No server side includes by default (
-Includes). - Limit methods to GET, POST and HEAD (
LimitExcept). - Disabled TRACE method by default (
TraceEnable off). - Reduced public server information (
ServerTokens Prod). - Reduced timeout of 30 seconds (
Timeout).
- No directory listings by default (
- Support for php-fpm:
- Multi-Processing Module:
mpm_event_module(switch tompm_prefork_moduleformod_php). proxy_moduleandproxy_fcgienabled by default (disable when no need for php).
- Multi-Processing Module:
- Shows "It Works!" in a browser if everything is setup correctly.
bastille bootstrap https://github.com/jail-templates/apache-https
bastille template $JAIL jail-templates/apache-https
Templates will be maintained until their respective software version is end-of-life. Repositories will then be archived and removed from any meta-templates.
If you have a question, suggestion or find a bug, please let us know via an Issues in the relevant repository or send us an email.
All templates are distributed under the 3-Clause BSD License. See LICENSE in every template repository for more information.