Apache Webserver security and optimization tips

Question

I\'m about to deal with managing and running my first Internet connected Apache webserver and I was wondering if there are any sys admins and developers out there that would lik

Answer 1

1. Chroot the webserver
2. Disable any module you aren't going to need
3. One you instead need is mod_security
4. Set up a file integrity checker for your webroot
5. Secure everything else on the same server and switch off anything not used
6. Run tests against your server with tools like nmap or Metasploit