Open Lite Speed Web Server .htaccess problem

FabioP

Enhance Control Panel Infrastructure:

Server 1 - Dedicated only for Enhance Control Panel;
Server 2 - Dedicated only for DNS 1;
Server 3 - Dedicated only for DNS 2;
Server 4 - Dedicated only for Web Server (Open Lite Speed);
Server 5 - Dedicated only for Data Base (Maria DB);
Server 6 - Dedicated only for Email;
Server 7 - Dedicated only for Backup.

Software (All servers are fully updated to the latest version):

Ubuntu v22.04.2
Enhance Control Panel Core v10.2 - AppcD v2.2.1

Problem:

In the .htaccess file of one of my new websites with WordPress v.6.4.2, PHP v8.3.2 and Web Server Open Lite Speed I correctly inserted this instruction code to modify the HTTP Header Instructions and the problem is that these HTTP Headers modification are never loaded even though with the latest updates relating to the Open Lite Speed (OLS) Web Server, after each modification the Open Lite Speed (OLS) Web Server itself should automatically reload and even if I try to restart it manually using these commands docker restart openlitespeed or docker exec openlitespeed /usr/local/lsws/bin/lswsctrl restart or by completely restarting the Server hosting Open Lite Speed Web Server, the changes to the HTTP Headers are never loaded (Obviously the entire Open Lite Speed Cache on WordPress is always deleted, including the CDN cache on both Cloudflare and Quick.cloud).

<IfModule mod_headers.c> <FilesMatch "\.(php|html)$"> Header set X-Frame-Options "SAMEORIGIN" Header set X-XSS-Protection "1; mode=block" </FilesMatch> </IfModule>

I post this request for support here so that its resolution can also help others.

Anyone who wants or can help me is welcome, thank you.

twest

I'm not sure ols supports mod_headers.

This is their doc for adding the security headers. But you can't do this in enhance since it will get reset during vhost changes or restarts.

https://openlitespeed.org/kb/setting-up-cors-on-openlitespeed/

FabioP

twest

Hi twest and thanks for your help.

Yes you are absolutely right, I had forgotten that because I have always made these changes via Open Lite Speed and never via the .htaccess file.

Open Lite Speed (OLS) as a Web Server does not support all the commands that Apache supports in . htaccess and this is one of the many reasons why I requested to @Adam and @Aliysa_Enhance that Enhance Control Panel add as soon as possible the possibility to make the change to the Open Lite Speed (OLS) Web Server configuration file permanent, but there are so many other reasons and unfortunately a Web Server that doesn't have the possibility to be able to be configured is useless just because of the very nature of the Web Server that needs to be able to be configured according to its specific use cases that always change over time.

I hope that the Enhance Control Panel Developer Team listens to this request, which is not just my request, as it is a function that many would like as it is truly essential to be able to make the best use of the Open Lite Speed Web Server.

Anyway thanks for your help twest, you are always very kind, thank you.

twest

FabioP on the plus side, Enhance is putting development hours into ols, which is nice. I can't think of any panel that has persistent config and htaccess auto compatibility, so enhance has at least fulfilled 50% of an amazing breakthrough for OLS users.

I'm sure they will a persistent config some day, but probably not anytime soon I wouldn't think. Not when there's an equal (and likely much much bigger) need to get custom configs for nginx users.

I wouldn't say the lack of persistent config is a total deal breaker for OLS. I would just limit to using it on smaller servers since you can't fine tune it. As for some things like headers security, there's some options you can do at the DNS level using Cloudflare or Sucuri to add cors protection. Maybe someone else has another creative way to add that.

In the meantime, if your budget allows, you might consider enterprise litespeed. It's config is persistent, and I've gotten great performance from it so far. The costs aren't too bad either, they have a free license for small servers (<2gb ram), and then pricing for larger licenses starts at $10 from there. I was happy to get a 3-worker license for slightly cheaper from cpanel (yes they resell many licenses for non-cpanel licenses, some at really good deals lol).

So maybe go with enterprise litespeed if your budget allows, and then maybe someday down the road you can easily switch to OLS when more enhance support is added 🙂

https://www.litespeedtech.com/products/litespeed-web-server/lsws-pricing

FabioP

twest

Hi Twest and as always I thank you for your help, you are always very kind, thank you.

Yes, I am very familiar with the commercial version of Lite Speed Enterprise, which I have always used and use even now and unfortunately I am also very familiar with their price list :-)

As far as HTTP headers are concerned, these, if you wish, can still be modified using PHP, although this technique is deprecated and not preferred, and if you use WordPress for your websites there is a Free Plugin that allows you to do this also via PHP or .htaccess, allowing you, at least, to save a lot of time and it is called HTTP Headers https://wordpress.org/plugins/http-headers/ for WordPress.

I am also a fan of the Enhance Control Panel Developer Team and I admire them very much and I am also convinced that they are super fast and efficient in adding functions, fixing bugs (when there are any) and above all in following the requests of the Community.

I say this because to date the best Web Servers are only three and they are: Open Lite Speed (OLS) free version, Lite Speed Enterprise (paid version) and NGINX free version and it is for these reasons that I am increasingly convinced that if were able to implement the Persistent Configuration of the free Open Lite Speed (OLS) Web Server, many small and medium-sized companies would switch to using Enhance Control Panel, as would many Agencies that manage dozens or hundreds of websites for their clients as well as many users who manage all their websites themselves (dozens or hundreds of websites) as the free version of the Open Lite Speed (OLS) Web Server is ultimately almost comparable in terms of features and functionality to its paid Lite Speed Enterprise version but obviously without any license costs and with the advantage of still being able to use their excellent and free Lite Speed Cache Plugin for WordPress https://it.wordpress.org/plugins/litespeed-cache/ which obviously also works with Open Lite Speed (OLS) Web Server .

I also know that the excellent Enhance Control Panel Developer Team has already done a lot with the Free Open Lite Speed (OLS) Web Server, adding with the latest updates the ability to automatically reload the Free Open Lite Speed (OLS) Web Server every time the .htaccess file is modified and for this reason I hope that very soon they will also be able to perform the miracle of making the modification of the Free Open Lite Speed (OLS) Web Server Configurations persistent and this would be a unique masterpiece.