Master Apache Web Server: Setup, Secure & Optimize

Enable the Apache service to start automatically at system boot using systemctl enable and verify its status after reboot.

Configure the Centaurus 7 firewall to permanently allow http and https traffic from anywhere, then verify access by loading the server's public IP in a browser.

Discover where the Apache web server is installed, locate its modules and configuration files, and explore the error message templates including 404 not found.

Explore the Apache directory structure and locate the Apache files using the binary. Learn the purpose of the core, modules, and logs directories and how the body holds configuration files.

Learn how to read and edit Apache's main configuration file, including server root, listen port, include files, user and group, document root, directory rules, modules, and restart steps.

Create your first page on the Apache web server by building a simple site with an index file, and configure a virtual host with a server name and document root.

Configure a name-based virtual host on Apache for academy cloud, create per-domain directories and vhost files, test configuration, restart Apache, and verify the index page with the domain.

Set up a port-based virtual host in Apache, creating a document directory and index page, configuring server to listen on port 80, testing syntax, and applying firewall and reload steps.

Configure an alias in Apache using the alias module to map a URL to a resource location, enable and test the configuration, and verify image access through the images directory.

Learn how to implement redirects in Apache to safely move content, use 301 permanent redirects for old URLs, handle other redirect types, and verify status codes to protect SEO.

Explore the Apache error log to identify error messages, client IPs, and forbidden access attempts, and learn to block malicious requests.

Learn to read the access log, interpret status codes such as 404 not found, 401 unauthorized, and 400 bad request, and identify suspicious admin path access attempts.

Configure Apache custom logs by creating per-site access log files with a tailored log format, combining remote host, time, request line, status, size, and user agent; verify syntax and test.

Master log rotation for web server logs using logrotate on Linux, configuring daily rotations, keeping three copies, setting a size threshold, enabling compression, and verifying with tests.

Learn essential apache security by removing version information and disabling directory listing, then harden configuration to prevent sensitive data exposure and unauthorized access.

Configure apache to run as the non-root user apache and its group, and set configuration directory permissions to 750 to prevent unauthorized read, write, and execute access.

Learn how to implement basic authentication on an Apache server by configuring the index file and configuration file to manage access and protect admin areas.

Learn to configure digest authentication in Apache, create the ht digest file with users and passwords, restart the server, and verify access in a browser.

Configure Apache access control to allow a specific ip to access the admin area, deny others, using SSL configuration and directives like require all granted and require not ip.

Discover how the administrator configures .htaccess for access authentication, sets directory restrictions with AllowOverride, and restarts Apache to apply authentication changes.

Enable basic authentication on the user side with .htaccess, create a members directory, configure auth files, generate and load user credentials, and validate login.

Install and configure antivirus software using ClamAV on a Linux system, enable scanning, update signatures, and quarantine infected files rather than deleting them to validate the antivirus setup.

Learn to protect your web server from dos attacks with mod_evasive by configuring thresholds like page_count and site_count. Block offending IPs for a time and verify the setup with testing.

Tune httpd.conf to improve performance by adjusting time out, keep alive, and max keep alive requests. See how these directives affect latency and server load in heavy traffic.

Adjust httpd.conf to improve performance and monitoring by enabling extended status briefly for statistics, then disabling it, and disable hostname lookups to reduce DNS overhead in security settings.

Analyze the Apache access log to identify top connecting IP addresses, assess suspicious activity and potential attacks, verify IP locations, and block offending IPs to secure the server.

Analyze Apache access logs with a script reporting top IP addresses, total connections, country, and bandwidth. Install pip and pull the tool from GitHub to detect and mitigate attacks.

Learn to monitor real-time web server traffic with Apachetop, a command-line tool for Apache and Nginx that displays access logs, request details, and status codes.