Email - Apache 00-base.conf, webmail

category: solutionz · date: 2019-12-31 · updated: 2026-10-02 · author: LALA

Email Solution · Config document · referenced from Webmail

The list of base modules Apache loads on the webmail server. The unified template switches off what a plain HTTPS site does not need: every line that starts with # CFG-OFF -> was an active LoadModule line in the distribution's file and was commented out by me. Lines commented with a bare # were already off in the stock file. The file is shown whole.

Item	Value
Path on the server	`/etc/httpd/conf.modules.d/00-base.conf`
Shown here	`DC2-A-VCMSX002`
Loaded by	`Include conf.modules.d/*.conf` in `httpd.conf`
Software	Apache HTTP Server 2.4 from RHEL 7
Activated with	`systemctl start httpd` in the install notes

The file

apache

#
# This file loads most of the modules included with the Apache HTTP
# Server itself.
#

LoadModule access_compat_module modules/mod_access_compat.so
# CFG-OFF -> LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule allowmethods_module modules/mod_allowmethods.so
# CFG-OFF -> LoadModule auth_basic_module modules/mod_auth_basic.so
# CFG-OFF -> LoadModule auth_digest_module modules/mod_auth_digest.so
# CFG-OFF -> LoadModule authn_anon_module modules/mod_authn_anon.so
# CFG-OFF -> LoadModule authn_core_module modules/mod_authn_core.so
# CFG-OFF -> LoadModule authn_dbd_module modules/mod_authn_dbd.so
# CFG-OFF -> LoadModule authn_dbm_module modules/mod_authn_dbm.so
# CFG-OFF -> LoadModule authn_file_module modules/mod_authn_file.so
# CFG-OFF -> LoadModule authn_socache_module modules/mod_authn_socache.so
LoadModule authz_core_module modules/mod_authz_core.so
# CFG-OFF -> LoadModule authz_dbd_module modules/mod_authz_dbd.so
# CFG-OFF -> LoadModule authz_dbm_module modules/mod_authz_dbm.so
# CFG-OFF -> LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
# CFG-OFF -> LoadModule authz_host_module modules/mod_authz_host.so
# CFG-OFF -> LoadModule authz_owner_module modules/mod_authz_owner.so
# CFG-OFF -> LoadModule authz_user_module modules/mod_authz_user.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule cache_module modules/mod_cache.so
LoadModule cache_disk_module modules/mod_cache_disk.so
LoadModule data_module modules/mod_data.so
# CFG-OFF -> LoadModule dbd_module modules/mod_dbd.so
LoadModule deflate_module modules/mod_deflate.so
LoadModule dir_module modules/mod_dir.so
# CFG-OFF -> LoadModule dumpio_module modules/mod_dumpio.so
# CFG-OFF -> LoadModule echo_module modules/mod_echo.so
# CFG-OFF -> LoadModule env_module modules/mod_env.so
# CFG-OFF -> LoadModule expires_module modules/mod_expires.so
# CFG-OFF -> LoadModule ext_filter_module modules/mod_ext_filter.so
# CFG-OFF -> LoadModule filter_module modules/mod_filter.so
LoadModule headers_module modules/mod_headers.so
# CFG-OFF -> LoadModule include_module modules/mod_include.so
# CFG-OFF -> LoadModule info_module modules/mod_info.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule logio_module modules/mod_logio.so
LoadModule mime_magic_module modules/mod_mime_magic.so
LoadModule mime_module modules/mod_mime.so
# CFG-OFF -> LoadModule negotiation_module modules/mod_negotiation.so
LoadModule remoteip_module modules/mod_remoteip.so
LoadModule reqtimeout_module modules/mod_reqtimeout.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule slotmem_plain_module modules/mod_slotmem_plain.so
# CFG-OFF -> LoadModule slotmem_shm_module modules/mod_slotmem_shm.so
# CFG-OFF -> LoadModule socache_dbm_module modules/mod_socache_dbm.so
# CFG-OFF -> LoadModule socache_memcache_module modules/mod_socache_memcache.so
LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
LoadModule status_module modules/mod_status.so
# CFG-OFF -> LoadModule substitute_module modules/mod_substitute.so
LoadModule suexec_module modules/mod_suexec.so
# CFG-OFF -> LoadModule unique_id_module modules/mod_unique_id.so
LoadModule unixd_module modules/mod_unixd.so
# CFG-OFF -> LoadModule userdir_module modules/mod_userdir.so
# CFG-OFF -> LoadModule version_module modules/mod_version.so
LoadModule vhost_alias_module modules/mod_vhost_alias.so
#LoadModule buffer_module modules/mod_buffer.so
#LoadModule watchdog_module modules/mod_watchdog.so
#LoadModule heartbeat_module modules/mod_heartbeat.so
#LoadModule heartmonitor_module modules/mod_heartmonitor.so
#LoadModule usertrack_module modules/mod_usertrack.so
#LoadModule dialup_module modules/mod_dialup.so
#LoadModule charset_lite_module modules/mod_charset_lite.so
#LoadModule log_debug_module modules/mod_log_debug.so
#LoadModule ratelimit_module modules/mod_ratelimit.so
#LoadModule reflector_module modules/mod_reflector.so
#LoadModule request_module modules/mod_request.so
#LoadModule sed_module modules/mod_sed.so
#LoadModule speling_module modules/mod_speling.so

The other module files

Three more files of the same directory were emptied the same way; every LoadModule line in them is commented out with # CFG-OFF ->.

File	Modules switched off
`00-dav.conf`	`dav_module`, `dav_fs_module`, `dav_lock_module`
`00-lua.conf`	`lua_module`
`00-proxy.conf`	`proxy_module`, the four `lbmethod_*` modules, `proxy_ajp`, `proxy_balancer`, `proxy_connect`, `proxy_express`, `proxy_fcgi`, `proxy_fdpass`, `proxy_ftp`, `proxy_http`, `proxy_scgi`, `proxy_wstunnel`

The files 00-mpm.conf (prefork), 00-ssl.conf, 00-systemd.conf, 01-cgi.conf and 10-php.conf have no CFG-OFF mark. So mod_cgi is still loaded, although nothing maps a CGI directory any more.

In 00-base.conf 32 modules are switched off and 25 stay loaded. Among the loaded ones, access_compat_module is needed by the deny from all in the LimitExcept block of httpd.conf, headers_module by the security headers, socache_shmcb_module by the TLS session cache and authz_core_module by every Require line.

Checked against Apache HTTP Server 2.4.69

As built	Today
`access_compat_module` kept for `deny from all`	The directives of `mod_access_compat` are deprecated; with `Require all denied` in `httpd.conf` this module could go as well
`10-php.conf` loads `php5_module` under the prefork MPM	`mod_php` is no longer available in RHEL 9; PHP runs through `php-fpm`, the default since RHEL 8

The module list of a current httpd package was not compared line by line.