Sys Admin TQM Checklist

Apache

Modules

  • mod_deflate
  • mod_rewrite
  • mod_ssl

Global Configuration

  • Gentoo: /etc/apache2/modules.d/00_default_settings.conf
  • CentOS: /etc/httpd/conf/httpd.conf
  • CentOS + CPanel: /usr/local/apache/conf/httpd.conf
IndexOptions FancyIndexing NameWidth=* SuppressDescription
ServerTokens Prod
TraceEnable off
ServerSignature Off
HostnameLookups Off
EnableMMAP On
EnableSendfile On
FileEtag INode MTime Size
ContentDigest On

MPM Prefork + mod_php

IfModule in .htaccess for compatiblity

It would be better if they were in php.ini or using ini_set() in code.

<IfModule mod_php5.c>
php_value include_path ".:/usr/local/lib/php"
</IfModule

MPM Worker + PHP CGI

  • SuExec
  • PHP overrides are in code or php.ini
AddType text/html .php .phps
AddHandler php-fastcgi .php .htm .html .js
AddHandler php-fastcgi-source .phps
Action php-fastcgi /cgi-bin/php.fcgi
Action php-fastcgi-source /cgi-bin/phps.fcgi
DirectoryIndex index.php index.html

SSL

  • Domain name CRT
  • SSL private key
  • CABundle CRT

VirtualHosts

NameVirtualHost *:80
NameVirtualHost *:443