# Apache multidomain webroot

**URL:** <https://community.letsencrypt.org/t/apache-multidomain-webroot/10663>\
**Category:** Server\
**Created:** [February 11, 2016, 10:48am UTC](https://community.letsencrypt.org/t/apache-multidomain-webroot/10663 "2016-02-11T10:48:36Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![mrtux](https://avatars.discourse-cdn.com/v4/letter/m/9de0a6/32.png) [@mrtux](https://community.letsencrypt.org/u/mrtux)\
**Post date:** [February 11, 2016, 10:55am UTC](https://community.letsencrypt.org/t/apache-multidomain-webroot/10663/2 "2016-02-11T10:55:07Z")

</div>

You might also need to allow apache reading the folder (and prevent script from being executed):

```
Alias /.well-known/acme-challenge/ /var/www/html/.well-known/acme-challenge/
<Directory "/var/www/html/.well-known/acme-challenge/">
    Options None
    AllowOverride None
    ForceType text/plain
    RedirectMatch 404 "^(?!/\.well-known/acme-challenge/[\w-]{43}$)"
</Directory>

```

The redirect match is not required, but helps preventing an information leak so that other people can see that this folder is redirected.

PS: if you are a hoster, this also prevents users from requesting a LetsEncrypt certificate.  
PPS: apache reload should be enough.

---

_[View the full topic](https://community.letsencrypt.org/t/apache-multidomain-webroot/10663)._