Linux Web Servers: Setting Up and Securing Web Servers

Web servers are a critical component for hosting websites, web applications, and APIs. Linux-based servers are the most popular choice for web hosting due to their flexibility and stability. Some of the popular web servers used on Linux include Apache, Nginx, and Lighttpd.

In this article, we will discuss how to set up and secure Apache, Nginx, and other web servers on Linux.

Setting up Apache Web Server

Apache is one of the most popular web servers available on Linux. It is known for its stability, performance, and flexibility. Before installing Apache, ensure that your Linux server is up to date.

sudo apt-get update
sudo apt-get upgrade

To install Apache, run the following command:

sudo apt-get install apache2

Once the installation is complete, start the Apache service:

sudo systemctl start apache2

You can verify that Apache is running by accessing your server's IP address from a web browser. For instance, if your server's IP address is 192.0.2.0, enter http://192.0.2.0 in a web browser URL bar and you should see the Apache2 Ubuntu Default Page.

Securing Apache Web Server

By default, Apache is secure, but it's important to take additional measures to ensure that your server is protected from potential threats. Below are some basic security measures you can take to secure your Apache web server:

Disable directory listing: Prevent directory listing by adding the following Options directive to your server configuration file.

<Directory /var/www/html>
    Options -Indexes
</Directory>

This will stop people from viewing your server directory contents.

Restrict access by IP address: To restrict access to your website or webserver by IP address or CIDR block, you can use the Allow and Deny directives. In this example, we will allow access to a specific IP address and deny access to all other IPs.

<Directory /var/www/html>
    Order Deny,Allow
    Deny from all
    Allow from 192.0.2.0
</Directory>

Enable HTTPS: Enable HTTPS on your server to encrypt data transfer between your client and web server. You can install a free TLS certificate from Let's Encrypt, which automates the process of obtaining trusted certificates. Install the certbot package and use the certonly command to obtain a certificate for your domain.

sudo apt install certbot python3-certbot-apache
sudo certbot --apache

Setting up Nginx Web Server

Nginx is another popular open-source web server that is known for its speed and efficiency.

Before installing Nginx, ensure that your Linux server is up to date.

sudo apt-get update
sudo apt-get upgrade

To install Nginx, run the following command:

sudo apt-get install nginx

Once the installation is complete, start the Nginx service:

sudo systemctl start nginx

You can verify that Nginx is running by accessing your server's IP address from a web browser. For instance, if your server's IP address is 192.0.2.0, enter http://192.0.2.0 in a web browser URL bar and you should see the Nginx default page.

Securing Nginx Web Server

By default, Nginx is secure, but it's important to take additional measures to ensure that your server is protected from potential threats.

Below are some basic security measures you can take to secure your Nginx web server:

Restrict access by IP address: To restrict access to your web server by IP address or CIDR block, you can use the allow and deny directives. In this example, we will allow access to a specific IP address and deny access to all other IPs.

location / {
    allow 192.0.2.0;
    deny all;
}

This will prevent access to your web server except for the specified IP address.

Enable HTTPS: As with Apache, it's important to enable HTTPS on your Nginx server to encrypt data transfer between your client and web server. You can install a free TLS certificate from Let's Encrypt as well.

sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx

Setting up other web servers

There are other web servers available on Linux, such as Lighttpd, that you can use to host your websites or applications. The installation process varies between the different web servers, but the basic setup and security measures remain the same. You can find more information on setting up other web servers on the official documentation.

Conclusion

Setting up a web server on Linux is essential for hosting websites, web applications, and APIs. Apache and Nginx are two popular web servers that are known for their stability and performance. In this article, we have discussed how to set up Apache and Nginx on Linux, and some basic security measures to protect your web server from potential threats. By following these measures, you can ensure that your web server is secure and reliable.

Linux Web Servers: Setting Up and Securing Apache, Nginx, and other Web Servers

Table of contents