DRAFT ❡

Webserver Internal

SSL ❡

Run

a2enmod ssl

`/etc/apache2/sslop

:443

ServerName

ServerAdmin

Document Root

SSlCertificateFile SSLCertificateKeyFile

// https://ssl-config.mozilla.org/

in vhost

# enable HTTP/2, if available
Protocols h2 http/1.1

# HTTP Strict Transport Security (mod_headers is required) (63072000 seconds)
Header always set Strict-Transport-Security "max-age=63072000"

in conf/modernssl.conf

# modern configuration
SSLProtocol             TLSv1.3
SSLOpenSSLConfCmd       Curves X25519:prime256v1:secp384r1
SSLHonorCipherOrder     off
SSLSessionTickets       off

SSLUseStapling On
SSLStaplingCache "shmcb:logs/ssl_stapling(32768)"

Debian Install ❡

Debian 11 has mpm_prefork disabled, mpm_event is already enabled

apt install php-fpm

NOTICE: To enable PHP 8.2 FPM in Apache2 do:
NOTICE: a2enmod proxy_fcgi setenvif
NOTICE: a2enconf php8.2-fpm

a2enmod headers a2enmod ssl a2enmod http2