Apache httpd.conf 샘플 보안·로그

샘플 httpd.conf 보안·로그 중심

ServerRoot "/etc/httpd"
ServerTokens prod
ServerSignature Off
ServerAdmin root@localhost
ServerName localhost
TraceEnable Off
Listen 80
User nobody
Group nobody

Include conf.modules.d/*.conf

<IfModule dir_module>
    DirectoryIndex index.html
</IfModule>
<Files ".ht*">
    Require all denied
</Files>

ErrorLog "logs/error_log"
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
SetEnvIf Remote_Addr "::1" do_not_log
SetEnvIf Remote_Addr "127\\.0\\.0\\.1" do_not_log
SetEnvIfNoCase Request_URI "\\.(jpg|png|gif|css|ico|js)$" do_not_log
CustomLog "logs/access_log" combined env=!do_not_log

AddDefaultCharset UTF-8

<IfModule mod_headers.c>
    Header set X-Content-Type-Options nosniff
    Header set X-XSS-Protection "1;mode=block"
    Header set X-Frame-Options "SAMEORIGIN"
    Header unset X-Powered-By
</IfModule>

IncludeOptional conf.d/*.conf

headers.conf 예

<IfModule mod_headers.c>
    Header set X-Content-Type-Options nosniff
    Header set X-XSS-Protection "1;mode=block"
</IfModule>