← All Tools
Server Config Validator
Validate Apache and Nginx configuration syntax with best-practice checks.
All processing is 100% client-side. Your configuration never leaves your browser.
Scope: this is a static text lint, not a parser. It does
not load modules or your include tree, so it cannot replace
apachectl configtest (Apache) or nginx -t (Nginx).
A directive it does not recognise is marked “verify” (info), never an error,
because modules add their own directives. Always test on a staging server before deploying.
Validation Results
Enter a configuration and click "Validate" to check for issues
Example Configurations
Common Checks Performed
Apache / .htaccess
- Unmatched / mismatched <Directory>, <Files>, <IfModule> blocks
- Deprecated access control (Order / Allow / Deny / Satisfy)
- RewriteEngine On present when RewriteRule is used
- Directory listing (Options Indexes) and ExecCGI
- SSLProtocol: obsolete SSLv2/SSLv3, deprecated TLS 1.0/1.1
- Best practice: -Indexes, ServerSignature/Tokens, HSTS
- Unrecognised directives → “verify” (info, not error)
Nginx
- Braces { } balanced (comment / string aware)
- Simple directives terminated with “;”
- ssl_protocols: obsolete SSLv2/SSLv3, deprecated TLS 1.0/1.1
- listen 443 missing “ssl”; removed “ssl on;”
- Directory listing (autoindex on); catch-all server_name _
- Best practice: server_tokens off, HSTS, nosniff
- Unrecognised directives → “verify” (info, not error)