How to Install and Enable mod_headers in Apache

Contents: What is mod_headers? Install Apache (If Not Installed) Check if mod_headers is Installed Install and Enable mod_headers Verify That mod_headers is Working Configure mod_headers in Apache Summary of Fixes

What is mod_headers?

mod_headers is an Apache module that allows you to modify HTTP headers in requests and responses.

Why Use mod_headers?

Security headers (e.g., X-Frame-Options, Strict-Transport-Security)
CORS (Cross-Origin Resource Sharing) configuration
Custom API response headers
Browser caching control

Install Apache (If Not Installed)

If Apache is not installed, install it first:

For Debian/Ubuntu

sudo apt update
sudo apt install apache2 -y

For CentOS/RHEL

sudo yum install httpd -y

Start and enable Apache:

sudo systemctl enable --now apache2  # Ubuntu/Debian
sudo systemctl enable --now httpd    # CentOS/RHEL

Check if mod_headers is Installed

Run:

apachectl -M | grep headers

Expected output:

headers_module (shared)

If mod_headers is not installed, install and enable it.

Install and Enable mod_headers

For Debian/Ubuntu

sudo a2enmod headers
sudo systemctl restart apache2

For CentOS/RHEL

Ensure mod_headers is loaded in Apache's configuration:

sudo nano /etc/httpd/conf/httpd.conf

Find or add:

LoadModule headers_module modules/mod_headers.so

Restart Apache:

sudo systemctl restart httpd

Verify That mod_headers is Working

Run:

curl -I http://yourdomain.com

If headers like X-Frame-Options or Access-Control-Allow-Origin are missing, configure them (Step 5).

Configure mod_headers in Apache

Add Security Headers

Edit your Apache configuration file:

sudo nano /etc/apache2/sites-available/000-default.conf

sudo nano /etc/httpd/conf/httpd.conf

Add inside the <VirtualHost> block:

<IfModule mod_headers.c>
    Header always set X-Frame-Options "DENY"
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-XSS-Protection "1; mode=block"
</IfModule>

Restart Apache:

sudo systemctl restart apache2

sudo systemctl restart httpd

Enable CORS (Cross-Origin Resource Sharing)

Header set Access-Control-Allow-Origin "*"
Header set Access-Control-Allow-Methods "GET, POST, OPTIONS"
Header set Access-Control-Allow-Headers "Content-Type"

For security, replace "*" with your domain instead of allowing all origins.

Summary of Fixes

Issue	Fix
Apache not installed	Install with `apt install apache2` or `yum install httpd`
mod_headers not enabled	`sudo a2enmod headers` (Debian) or `LoadModule headers_module` (CentOS)
Headers not appearing in response	Add rules in Apache config or .htaccess
Changes not applying	Restart Apache: `sudo systemctl restart apache2`
Debug headers	Use `curl -I http://yourdomain.com`

Now mod_headers is installed and working!

How to Install and Enable mod_headers in Apache

What is mod_headers?

Install Apache (If Not Installed)

For Debian/Ubuntu

For CentOS/RHEL

Check if mod_headers is Installed

Install and Enable mod_headers

For Debian/Ubuntu

For CentOS/RHEL

Verify That mod_headers is Working

Configure mod_headers in Apache

Add Security Headers

Enable CORS (Cross-Origin Resource Sharing)

Summary of Fixes

High-Availability Cloud VDS

Hosting

Cloud Solution

For You

VDS

Website Builders

Our services

Client Area

Select Currency

How to Install and Enable mod_headers in Apache

What is mod_headers?

Install Apache (If Not Installed)

For Debian/Ubuntu

For CentOS/RHEL

Check if mod_headers is Installed

Install and Enable mod_headers

For Debian/Ubuntu

For CentOS/RHEL

Verify That mod_headers is Working

Configure mod_headers in Apache

Add Security Headers

Enable CORS (Cross-Origin Resource Sharing)

Summary of Fixes

High-Availability Cloud VDS

Hosting

Cloud Solution

For You

VDS

Website Builders

Our services

Client Area

Выберите валюту