Looks pretty minimal to me. I'm assuming the last three are there because you're using them. If they aren't used, they can be commented out. PHP especially is a serious security consideration, but of course virtually everyone uses it. I'd not load it if it weren't used, but it's probably being used.
mod_vhost_alias is not what most people use. It's typically used when you have thousands of sites, so it can probably go.
You probably don't want mod_autoindex either. That's the module that lists files if you don't create an index page. It's a security concern and is often disabled via Options anyway.
Hmm, it occurs to me I've hacked or at least read all of those modules. I guess I've worked with most of the 300,000 plus lined of Apache code by now. Now I'm learning a new system that's 1.1 million lines of code.
|