Apache HTTP Server - open-source, cross-platform Web Server

• Can run as unprivileged user / group (ex: www / www)
• It can be used as a trusted web server for both: mission-critical and experimental purposes
• It is highly configurable and extensible with third-party modules
• Can be customised by writing modules using the Apache module API
• The Server provides full source code and comes with an unrestrictive license and runs on a majority of operating systems (cross-platform)
• Allow setting different permissions assigned on multiple ServerRoot Directories
• It provides the necessary configuration to deal with basic (DOS) Denial of Service attacks

• The Worker and Event MPMs does not yet have full support for multithreaded PHP module on all operating systems / platforms (only the Prefork MPM does it on all platforms at the moment)
• The Prefork MPM spawns new processes for each request making things less efficient and may consume more RAM under heavy loads

## Sample (minimal) Configuration for Apache HTTP Server v 2.4 @ /etc/apache2/httpd2.conf

ServerRoot "/var/www"

## Minimal modules needed, using MPM Prefork (the standard setup)

#LoadModule mpm_event_module   modules/mod_mpm_event.so
#LoadModule mpm_worker_module  modules/mod_mpm_worker.so
LoadModule  mpm_prefork_module modules/mod_mpm_prefork.so

LoadModule  unixd_module       modules/mod_unixd.so

LoadModule  log_config_module  modules/mod_log_config.so

LoadModule  mime_module        modules/mod_mime.so
LoadModule  dir_module         modules/mod_dir.so
LoadModule  authz_core_module  modules/mod_authz_core.so

<IfModule unixd_module>
User www
Group www
</IfModule>

TypesConfig conf/mime.types

PidFile logs/httpd.pid

## Port to Listen on
Listen *:80

## In a basic setup httpd can only serve files from its document root
DocumentRoot "/var/www/htdocs"

## Default file to serve
DirectoryIndex index.html

## Errors go to their own log
ErrorLog logs/error_log

## Access log
LogFormat "%h %l %u %t \"%r\" %>s %b" common
CustomLog logs/access_log common

## Never change this block. It must deny access to everything except below allow access to the www DocumentRoot
<Directory />
  AllowOverride None
  Require all denied
</Directory>

## Allow documents to be served from the DocumentRoot
<Directory "/var/www/htdocs">
  Require all granted
</Directory>

## END