Ray, Apache guru
 

Which modeles do you have in your config?

curious if i need to remove any, i stripped it down pretty much


LoadModule auth_basic_module libexec/apache22/mod_auth_basic.so
LoadModule authz_host_module libexec/apache22/mod_authz_host.so
LoadModule log_config_module libexec/apache22/mod_log_config.so
LoadModule autoindex_module libexec/apache22/mod_autoindex.so
LoadModule alias_module libexec/apache22/mod_alias.so
LoadModule vhost_alias_module libexec/apache22/mod_vhost_alias.so
LoadModule dir_module libexec/apache22/mod_dir.so
LoadModule rewrite_module libexec/apache22/mod_rewrite.so
LoadModule mime_module libexec/apache22/mod_mime.so
LoadModule unique_id_module libexec/apache22/mod_unique_id.so
LoadModule auth_token_module libexec/apache22/mod_auth_token.so
LoadModule php5_module libexec/apache22/libphp5.so

Looks pretty minimal to me. I'm assuming the last three are there because you're using them. If they aren't used, they can be commented out. PHP especially is a serious security consideration, but of course virtually everyone uses it. I'd not load it if it weren't used, but it's probably being used.


mod_vhost_alias is not what most people use. It's typically used when you have thousands of sites, so it can probably go.


You probably don't want mod_autoindex either. That's the module that lists files if you don't create an index page. It's a security concern and is often disabled via Options anyway.

Hmm, it occurs to me I've hacked or at least read all of those modules. I guess I've worked with most of the 300,000 plus lined of Apache code by now. Now I'm learning a new system that's 1.1 million lines of code.

will i need alias then if i dont have autoindex?

Yes, probably for ScriptAlias, used to set up cgi-bin.

ya i dont have cgi bin for any of the sites on the server, no scriptalias calls in httpd.conf

Oh those poor souls whose still uses apache...

Apache is the only option in* some cases.

That's true,but in such cases i rather uses lower quality script then install apache just to use some script which dont work on other httpd servers.

Yes I have specifically avoided scripts that are apache dependent in the past.
Still if you want to proxy java for example, apache is your friend.
It's valuable in its versatility, but definitely bulky.

Not sure what exactly you reffer but i proxied nginx to java without problem(jira/confluence script)

Default configurations with everything but the kitchen sink certainly can be bulky. I think the smallest I've seen is 3MB on a box with 16MB RAM. Looks like Fris is shooting for around 12 MB unshared memory. I don't recall what PHP takes. I'd guess khttpd would be the slimmest, probably under a MB I'd guess.

Yep I'm going to trim it down here soon too. Running it on windows. It's solid software at that.