Start with setting apache rule to prevent httproxy vulnerability. Set this after main configuration (before serveradmin)

vi /etc/httpd/conf/httpd.conf

RequestHeader unset Proxy early

Install php-fpm

yum install php72-fpm

Enable mpm_event and comment out everything else

vi /etc/httpd/conf...

Read more

Update and install the Let's Encrypt client

Install

sudo apt-get update
sudo apt-get install letsencrypt python-letsencrypt-apache

Invoke letsencrypt

sudo letsencrypt --apache -d 

Automate the renewal process

letsencrypt renew renews all the domains on the server secured wi...

Read more

This is helpful when you don't want to disable Selinux and need to run external program like wkhtmltopdf via apache on selinux enabled. Run the following commands from the terminal. (This has been tested in CentOS 7)

Allow Execution

setsebool httpd_execmem on

Change a dirs security context if

Read more