Questions tagged [apache2]
The Apache HTTPd Server. When asking questions about virtualhosts, please include the output of the following command: "apache2ctl -S" (or "httpd -S" depending on your OS)
1,828 questions
3 votes
1 answer
73 views
Per-domain error log for PHP-FPM and Apache
I recently moved a PHP application to a new server. I have multiple virtual hosts, and want to keep separate error logs for each domain. For this reason, on the old server I used the ErrorLog ...
- 241
0 votes
0 answers
106 views
Podman Container Issue - Apache2/Nginx Web Server 403 Forbidden
I’ve been encountering a very curious issue with a Podman container, and I’ve been trying to resolve it for days now. I want to run Container (1) with a web server (Apache2/httpd) on a VM. I forward ...
- 1
1 vote
0 answers
30 views
Trying to set HttpOnly but no changes are working
After a PenTest was told to set the HttpOnly flag on all of our cookies. We have an Ubuntu Server 22.04 & 24.04 LAMP stack with a WordPress website. I have made changes to /etc/apache2/apache2....
- 11
0 votes
0 answers
217 views
Keycloak configuration behind a reverse proxy redirects from HTTPS to HTTP - Mix Content issues
I deployed Keycloak, which is working correctly, and I can access the interface. However, when I try to configure my reverse proxy to access it from the LAN and set up HTTPS, it no longer works. My ...
- 1
0 votes
1 answer
209 views
PHP-fpm (v 8.3) not using sqlsrv or pdo_sqlsrv on Ubuntu 24.04
My VM running Ubuntu 24.04 is giving an error that it cannot find the driver for SQLServer (aka MSSQL-Server aka sqlsrv). Sure enough, a page with phpinfo(); shows no sqlsrv or pdo_sqlsrv. Here were ...
0 votes
1 answer
427 views
Apache error "AH00016: Configuration Failed"
I get Apache error AH00016: Configuration Failed in Apache error.log. The Apache service is not starting because of this error. Any idea what causes the error? Anybody had such error? Edit: sudo ...
- 402
0 votes
0 answers
52 views
When enabling mod cgid, apache2 denies static files
When I don't have mod cgid enabled, static files are served from the html directory, and cgi scripts are downloaded instead of executing them (which is as expected). When I enable mod cgid and restart ...
- 101
0 votes
1 answer
103 views
Why doesn't apache redirects work with a global (server config) level ServerName?
I have an apache server that lives behind a load balancer/proxy thing, within a k8s pod/container At my main httpd.conf we have ServerName my.site.example.com (I have also tried my.site.example.com:...
- 763
0 votes
0 answers
82 views
How to troubleshoot "Too many open files error" in web server?
I had a server which was based on apache; it was used to serve multiple image tiles of a map. I thought of improving it by shifting it to HTTP3, for this I had to shift to nginx and quick protocol. ...
- 57
0 votes
1 answer
170 views
Lack of permissions accessing certificates for SSL on almalinux 9
I'm setting up a web site on Almalinux. When the certificates are located in /etc/pki/ca-trust the site works. When the certificates are in other locations with different permissions it does not work. ...
0 votes
0 answers
124 views
How to set username to mod_gssapi in Apache server
I have the following configuration in Apache below. I need to set username from decoded Base64 JWT token. I get the correct ENV for REMOTE_USER_LOCAL, but this doesn't work with mod_gssapi: <...
- 3
0 votes
1 answer
94 views
Apache proxy server limitrequestfieldsize configuration
I have tried adding the LimitRequestHeaderSize in all files. In httpd.conf as a directive. Added as directive in one of the included files where proxy and reverse proxy are defined. Added it in ...
2 votes
0 answers
98 views
Why can't I saturate the TCP backlog with SYN flood in Docker, but it works fine on physical hardware? [closed]
Problem I'm investigating SYN flood attacks for a university project, but I'm facing an interesting challenge: the same attack that successfully saturates a Raspberry Pi fails completely in a Docker ...
- 21
0 votes
0 answers
40 views
Site/PHP Operations goes to a Hault after a load spike
So I have been trying to go through an issue, where after a certain spike in PHP operation which exceeds in Either IOPS, CPU/RAM threshold - it brings not only the site to a complete stalemate but all ...
0 votes
1 answer
96 views
fail2ban regex not catching encoded urls
I'm trying to configure a regex for fail2ban for apache2 access.log. If I browse to "https://mywebsite.com/%69%6E%64%65%78.%68%74%6D%6C" in brings me to the index.html page and this is ok. ...
- 101
0 votes
1 answer
338 views
Apache: Disable redirect from http to https?
I have an apache web server running legacy application (intranet) that use http (not https). Now with the update to Chrome 135, users are always getting redirected to https. I'm not sure if the ...
- 191
0 votes
0 answers
61 views
How to add Apache Headers in Linux 12?
I have a problem with apache2 headers, my needs are: Add the HTTP header “X-Served-By” with the server hostname as the value I use headers: Header set X-Served-By "%{SERVER_NAME}e" but my ...
- 1
0 votes
1 answer
428 views
How to set up git-http-backend with appropriate permissions to make repos also accessible via SSH
The situation: Debian12 host, apache2 httpd serving git CGI (located in /repos/git) for cloning repos. Repos are stored in /repos directory, and are owned by git user to enable ssh access to them (e.g....
- 103
0 votes
1 answer
161 views
Incorrect REMOTE IP in Apache access log with reverse proxy
I had to setup a legacy PHP 5.3 Apache environment with Docker and it works perfectly except for the fact that the Apache access log is showing incorrect remote/client IP! 172.110.0.1 is the IP of the ...
- 113
1 vote
3 answers
341 views
Changing URL structures via htaccess
sorry; have not done this since 2016, and kinda stumped. Need help with likely simple mod_rewrite rule for htaccess file to redirect old files which no longer have a trailing _number on the end. Need ...
0 votes
1 answer
60 views
Do I need to include SSL configuration in a virtual host that does redirection only?
I have a virtual host that redirects non-www to www over SSL: <VirtualHost *:443> ServerName example.com Redirect / https://www.example.com/ # Do I need to include SSL configuration here? &...
- 3
0 votes
1 answer
104 views
subdomain redirect to domain, BUT, if I type "subdomain/index.php" (or index.html), it does work and display the page properly (Apache2 & Wordpress)
My VPS crashed some time ago, everything was working as expected. I host 2 Wordpress sites on this server, "domain" and "sub.domain". My apache2 .conf and le-ssl.conf files are the ...
1 vote
0 answers
77 views
How to check the MaxRequestWorkers value being actively in use
Using AlmaLinux 9.5 with Virtualmin 7.30.4 and Apache2: My server keeps having issues due to the MaxRequestWorkers number reached. I have updated it to a higher number than the default, but I'm afraid ...
- 111
1 vote
0 answers
248 views
Unable to get PUT method working with apache 2
Apache 2.14, Ubuntu 20.04.6. Trying to use PUT method from a Java program to replace an existing resource on an Apache2 server. It worked several years ago with different versions of Apache and Ubuntu,...
- 11
0 votes
2 answers
84 views
Editing httpd default settings
I'm trying to edit my Apache httpd default settings but i can't seem to find the correct settings.. Here's what i have: When i run "httpd -S", i got the results below and i want to edit this ...
- 11
0 votes
0 answers
156 views
Apache2 configuring Duplicati behind proxy
Duplicati for any reason will fail if you try to proxy the root folder so the domain to main IP as it had been discussed here: https://github.com/duplicati/duplicati/issues/1932 The only solution is ...
- 1
0 votes
0 answers
57 views
How Do I Resolve "ModSecurity: Found another rule with the same id" error?
I am using ModSecurity on my Ubuntu 22.04 box for use with Apache2 and I am getting the following error when adding the following rule to my custom ruleset: ModSecurity: Found another rule with the ...
0 votes
0 answers
86 views
Elasticsearch losing logs during DDoS
Here are my setup details: I have Elasticsearch, Kibana, Filebeat, and the Apache module for Filebeat running on a single server along with my website (only one website is hosted). The stack is ...
0 votes
2 answers
57 views
Get domain to display in address bar instead of IP
I have a mediawiki installation on Ubuntu. I have the following DNS record applied: A @ -> xx.xx.xx.xx My .conf file had the following: <VirtualHost *:80> ServerName example.com ...
0 votes
1 answer
129 views
Apache2 RewriteRule does nothing
I have a mediawiki installation on Ubuntu and am trying to redirect the the domain from the Apache "It Works!" page to the main page of the wiki. My apache2.conf contains the following: <...
0 votes
1 answer
267 views
Apache behind Traefic reverse proxy, path based routing
I'm running an apache server behind a Traefic reverse proxy. I seem to be getting through to the apache service, but always get a 404 message. Hitting the url: http://host.local/core/depot Results in ...
- 131
0 votes
0 answers
119 views
Best way to use mod_security
I want to install mod_security in some servers(both nginx and httpd) and a lot of tutorials compile mod_security, specially with nginx, but I know that I can install it with yum(yum install ...
0 votes
1 answer
105 views
Apache: order and merging of Require directives
I want to block a list of IP addresses and bad user agents on my Apache web server. So I'm adding this to /etc/apache2/conf-available/blocklist.conf: BrowserMatchNoCase "ChatGPT" bad_bot &...
- 1
0 votes
0 answers
187 views
Apache2 closing websocket after 60s of idle time. Only generic Timeout makes a difference, ProxyWebsocketIdleTimeout returns syntax error
I have the following virtual host on apache2 acting as a reverse proxy for a websockify server on a novnc setup. <VirtualHost *:80> ServerName stream.kiosk-vm <Location "/"&...
- 161
0 votes
1 answer
359 views
web server can't be accessed from outside the server
I have a Hetzner cloud server running on Debian and I'm trying to host a website on it, unfortunately every time I try to access it the connection just times out. I've tried both Apache2 & Nginx ...
0 votes
0 answers
48 views
Management of different web domains associated to different servers running on the same machine
I have a local machine using Debian 12 in the company lab. On this local machine I have different servers running and reachable from different web addresses. Let's say the first one is reachable ...
- 101
4 votes
2 answers
2k views
How to reject Host header if different than URL of request in Apache?
I have an Apache/2.4.6 (CentOS) server with multiple subdomains as ServerAlias in Apache VirtualHost. something like: <VirtualHost *:443> ServerName example.com ServerAlias a.example.com ...
- 157
-1 votes
1 answer
761 views
SOAP Webservice HTTPS request
I would like more informations about how to configure a server to test a SOAP request. The webservice provider sent me two ".cer" files that I need to install in a apache server. In my ssl ...
- 1
0 votes
0 answers
156 views
is there any way to use a proxy for Anthropic Computer Use Demo?
I was wondering if there's a way to send the requests of Anthropic Computer Use Demo (https://github.com/anthropics/anthropic-quickstarts/tree/main/computer-use-demo#accessing-the-demo-app) to a local ...
- 1
0 votes
0 answers
119 views
Enable POST body logging using modsecurity
I have been working on trying to get POST request BODY logging using modsecurity. In the modecurity.conf file, I have enabled /usr/lib/apache2/modules/mod_authz_core.so this is my entire modsecurity....
0 votes
0 answers
81 views
Apache rewrite rule ignoring everything after / for one rule
I am running a webserver behind a Cloudflare load balancer and a redirect I have set up in Apache isn't working. I have two https ports running on the server, 443 and 8443. Most traffic is for the 443 ...
0 votes
2 answers
229 views
Redirect http domain to another https domain without warning?
My main domain is mydomain.org, with a SSL certificate (https). And I have other domains (.com, .net, sub domains of the .org) that point to the main one (.org) (redirect), but they don't have SSL ...
- 143
0 votes
1 answer
131 views
Server appearing offline to browser, even though it is online
I have launched 8 or 9 webservers, personally, and something is very unusual this time regarding http/https transfer with apache2. Ports 80 and 443 are up, as indicated by nmap on a remote client ...
- 1
1 vote
1 answer
160 views
How to stop Apache to return a wrong line before the HTML header breaking it
I use a simple site enabled to publish files in Apache: File: /etc/apache2/sites-enabled/contents.conf <Directory "/mnt/data/contents/"> Options FollowSymLinks ...
- 527
0 votes
0 answers
181 views
DOCKER - trying to run mysql and apache both in foreground
FROM ubuntu:latest Run <<EOF apt update apt install -y apache2 mysql-server php libapache2-mod-php php-mysql php-curl php-json php-cgi php-cli php-zip php-xml php-mbstring apt install wget EOF ...
2 votes
0 answers
301 views
How to make HTTP OPTIONS responses working for WebDAV with Apache2?
The HTTP OPTIONS request is an HTTP request type (like GET, POST) to web servers. It is optional as a helper, you can use it to programmatically find out what requests web servers understand. But you ...
- 527
0 votes
1 answer
73 views
Apache2 stops serving HTTP pages at random times during the day, but not HTTPS
I've been noticing my websites are going down pretty frequently at times for the last few weeks, only sometimes but after a while they would be back up and running. Until now, I attributed this ...
- 111
2 votes
1 answer
479 views
Change Apache2 default tmp directory to avoid full drive
Is it possible to modify apache2 default configuration to use another tmp folder instead /tmp? Let's say /filestore/temp. Long story: I've some size restrictions on my /tmp drive and I would like to ...
0 votes
0 answers
42 views
Apache automatically adds an 204 to the end of link when reverse proxying another site
I have an site a.example.com, and another site b.example.com. I tried to set up a reverse proxy on a.example.com using Apache2, so that when I access a.example.com, the server would access b.example....
0 votes
0 answers
55 views
Is this an Apache server exploit?
Viewing my access logs for the last few days, I have seen high-speed bursts of access attempts on one web resource per day. For example, yesterday was an image, today is a PHP document. Today's burst ...
- 101