Add EnableSendfile on. Prevent web clients from accessing htaccess files and backup...

diff --git a/apache-httpd.conf b/apache-httpd.conf
index eaec1ea171a99b537610535d5b942170bc21d310..b5783f2470d8f11a9285520e0aab682c20a2d995 100644 (file)
--- a/apache-httpd.conf
+++ b/apache-httpd.conf
@@ -66,6 +66,28 @@ HostnameLookups Off
 
 TraceEnable Off
 
+#
+# EnableMMAP and EnableSendfile: On systems that support it, 
+# memory-mapping or the sendfile syscall may be used to deliver
+# files.  This usually improves server performance, but must
+# be turned off when serving from networked-mounted 
+# filesystems or if support for these functions is otherwise
+# broken on your system.
+# Defaults if commented: EnableMMAP On, EnableSendfile Off
+#
+#EnableMMAP off
+EnableSendfile on
+
+# Prevent .htaccess and .htpasswd files from being viewed by Web clients. 
+<Files ".ht*">
+    Require all denied
+</Files>
+
+# Prevent backup files from being viewed, too.
+<Files "*~">
+    Require all denied
+</Files>
+
 # Include other modules and packages config.
 IncludeOptional conf.d/*.conf