Web server requirements

Drupal works on any web server with a version of PHP that meets the PHP version requirements.

Many hosting providers offer PHP version options. The default PHP version might be less than the version required for Drupal, so check the current version in your host’s control panel, and change it to the latest supported version (if needed).

PHP has occasional security releases, watch for them at php.net and upgrade/patch your servers as needed, or work with a hosting provider that handles PHP updates.

File and folder permissions

Drupal and PHP should have read and write access to the /sites/default/files directory. This area is used to store cached files (compressed CSS and JavaScript) and any file uploads through the Drupal interface

HTTP request and response headers

From Drupal 11.3, the following HTTP request and response headers are required for the built-in HTMX support to function properly. If your webserver or intermediaries filter the headers out, those need to be properly configured to let them through.

Request

• HX-Boosted: indicates that the request is via an element using hx-boost
• HX-Current-URL: the current URL of the browser
• HX-History-Restore-Request: “true” if the request is for history restoration after a miss in the local history cache
• HX-Prompt: the user response to an hx-prompt
• HX-Request: always “true”
• HX-Target: the id of the target element if it exists
• HX-Trigger-Name: the name of the triggered element if it exists
• HX-Trigger: the id of the triggered element if it exists
   

Response

• HX-Location: allows you to do a client-side redirect that does not do a full page reload
• HX-Push-Url: pushes a new url into the history stack
• HX-Redirect: can be used to do a client-side redirect to a new location
• HX-Refresh: if set to “true” the client-side will do a full refresh of the page
• HX-Replace-Url: replaces the current URL in the location bar
• HX-Reswap: allows you to specify how the response will be swapped. See hx-swap for possible values
• HX-Retarget: a CSS selector that updates the target of the content update to a different element on the page
• HX-Reselect: a CSS selector that allows you to choose which part of the response is used to be swapped in. Overrides an existing hx-select on the triggering element
• HX-Trigger: allows you to trigger client-side events
• HX-Trigger-After-Settle: allows you to trigger client-side events after the settle step
• HX-Trigger-After-Swap: allows you to trigger client-side events after the swap step

Apache

Apache is the most commonly used web server for Drupal. Drupal requires Apache 2.4.7 or greater hosted on UNIX/Linux, OS X, or Windows.

The majority of Drupal development and deployment is done on Apache, so there is more community experience and testing performed on Apache than on other web servers.

The Apache 'mod_rewrite' extension is required. It is used for clean URLs.

The Apache Virtualhost configuration must contain the directive AllowOverride All to allow Drupal's .htaccess file to be used.

If the Apache server has Options +MultiViews enabled by default, then the Apache Virtualhost configuration should also contain Options -MultiViews (or have -MultiViews added to the existing Options directive).

On some systems, particularly OpenSuse distributions you may have to add SymLink settings to the .htaccess file. Depending on security settings, you may need to add either +FollowSymLinks or +SymLinksIfOwnerMatch (especially on shared hosts). If this is required, the on-screen error messages may be unhelpful, but the error logs identify the problem correctly in both cases. If you edit the .htaccess file remember that you have to re-edit after updates which overwrite the file!

See also Relocated web root on shared hosting with symlink, if you are using shared hosting, and cannot change the DocumentRoot via the GUI, or otherwise.

Nginx

Nginx is a commonly used web server that focuses on high concurrency, performance and low memory usage.

Drupal requires Nginx 1.1 or greater hosted on UNIX/Linux, OS X, or Windows. Nginx is a popular alternative to Apache, so there is also significant community experience and testing performed on Nginx.

Microsoft IIS

Microsoft IIS is a web server and a set of feature extension modules for use with Microsoft Windows.

As of Drupal 11.0.0 Drupal does not support the use of Microsoft IIS.

PHP Built-in Web Server (Development Only)

PHP Built-in Web Server is included as a CLI SAPI tool in all recent versions of PHP and was designed to aid in application development. It may also be useful for testing purposes or for application demonstrations that are run in controlled environments. It is not intended to be a full-featured web server, therefore, it should not be used as a production server for public use.

This web server can be started using the Drupal quick-start command.

Internet Protocol (IP) Version(s)

Drupal Core does not restrict access based on IP format. Specifically, requests using IPv4 and IPv6 are compliant with Drupal Core. Certain add-on (contributed or custom) modules may have their own restrictions or requirements related to the IP version. However, Drupal Core itself has no such restrictions.