Best Apache configuration?

[foxfox]

are there any production/recommended httpd.conf out there?

i know different configurations need different config...but are there any recommendation?

thanks.

[jdMorgan]

To mis-quote:
> Are there any recommended wives, girlfriends, husbands, or boyfriends out there?
> I know different situations call for different love interests...but are there any recommendation?

Yes, I recommend you do whatever will make you happy. :)

Everything depends on what you plan to do with the server, whether you intend to run IP-based or name-based virtual servers, load-shared servers, back-end application servers, etc.

A good place to start is with a "plan" for what you intend to do now and in the foreseeable future, and the Apache server configuration documentation -- For example, the extensive coverage of configuring virtual servers.

Jim

[g1smd]

There is a certain "minimum" amount of stuff that you will probably want to do.

These include some sort of image hotlinking protection, fixing things up so that index file filename access is re301 directed to the trailing slash version of the URL, and domain canonicalisation so that non-www accesses are 301 redirected to the www version of the URL, and so on.

You'll also need to set up custom error documents for at least the 401, 403 and 404 error codes.

[foxfox]

yes, what i am finding is something similar to php.ini-recommended

it contains some safe settings for production use, e.g. hiding server signature....

[coopster]

As mentioned, it is specific to your personal use of Apache but you should at least have a read through the Apache Security Tips [httpd.apache.org].