# Apache vhost best practices

At least the following directives should be in each virtual host configuration to set up a virtual host.

### ServerName

The fully qualified domain name under which the host should be addressed.

### DocumentRoot

Path to the directory from which Apache should serve files for this host. For security reasons, access to the entire file system is forbidden by default, so you must explicitly unlock this directory within a Directory container.

### ServerAdmin

E-mail address of the server administrator. This address is, for example, shown on error pages Apache creates.

### ErrorLog

The error log file for this virtual host. Although it is not necessary to create separate error log files for each virtual host, it is common practice to do so, because it makes the debugging of errors much easier. /var/log/apache2/ is the default directory for Apache’s log files.

### CustomLog

The access log file for this virtual host. Although it is not necessary to create separate access log files for each virtual host, it is common practice to do so, because it allows the separate analysis of access statistics for each host. /var/log/apache2/ is the default directory for Apache’s log files.

As mentioned above, access to the whole file system is forbidden by default for security reasons. Therefore, explicitly unlock the directories in which you have placed the files Apache should serve - for example the DocumentRoot:

<Directory "/srv/www/www.example.com/htdocs">
Require all granted
</Directory>


Note: Require all granted
In previous versions of Apache, the statement Require all granted was expressed as:

Order allow,deny
Allow from all


This old syntax is still supported by the mod_access_compat module.

The complete configuration file looks like this:

<VirtualHost 192.168.3.100>
ServerName www.example.com
DocumentRoot /srv/www/www.example.com/htdocs