ServerTokens Prod
ServerSignature Off
TraceEnable Off
AddDefaultCharset UTF-8
Header set X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
EnableSendfile on
HostnameLookups Off
ServerRoot "/etc/httpd"
Timeout 60
ProxyTimeout 60
KeepAlive On
MaxKeepAliveRequests 1000
KeepAliveTimeout 5
ServerLimit 256
ThreadsPerChild 25
ThreadLimit 25
StartServers 3
MinSpareThreads 75
MaxSpareThreads 250
MaxRequestWorkers 400
MaxConnectionsPerChild 10000
Listen 80
# LoadModule foo_module modules/mod_foo.so
Include conf.modules.d/*.conf
User apache
Group apache
ServerAdmin root@localhost
ServerName localhost:80
AllowOverride none
Require all denied
DirectoryIndex index.html
Require all denied
ErrorLog "logs/error_log"
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
CustomLog "logs/access_log" combined
TypesConfig /etc/mime.types
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType text/html .shtml
AddOutputFilter INCLUDES .shtml
MIMEMagicFile conf/magic
ExpiresActive On
ExpiresDefault "access plus 1 seconds"
ExpiresByType image/gif "access plus 1 year"
ExpiresByType image/jpeg "access plus 1 year"
ExpiresByType image/png "access plus 1 year"
ExpiresByType image/svg+xml "access plus 1 year"
#ExpiresByType text/css "access plus 1 year"
#ExpiresByType text/js "access plus 1 year"
#ExpiresByType text/javascript "access plus 1 year"
IncludeOptional conf.d/*.conf
ServerName www.example.com
DocumentRoot "/var/www/html"
Options FollowSymLinks
AllowOverride None
Require all granted
SetEnvIf Request_URI "\.(gif|jpg|png|css|js)$" nolog
ErrorLog logs/error_log
CustomLog logs/access_log combined env=!nolog