Apache86 (QTS 6 / Hero6) (Release Candidate 3 Preview)

Apache86 is a complete modern Web hosting platform for QNAP NAS running QTS 6 or QuTS hero 6.

It provides a self-contained Apache HTTP Server environment with PHP 8.6, PHP-FPM, TLS management, virtual hosts, security tools, diagnostics, application integration and a dedicated Web administration interface.

Apache86 can be used both as a traditional Web server and as a common Web runtime for other QPKG applications.

Main features

• Apache HTTP Server
• PHP 8.6 with PHP-FPM
• HTTP and HTTPS hosting
• Virtual host management
• Apache module manager
• PHP extension manager
• PHP-FPM pool management
• OPcache and PHP performance information
• Authenticated phpinfo() based on the private PHP-FPM FastCGI listener
• TLS certificate management
• Self-signed certificate support
• QTS certificate import
• Let’s Encrypt / ACME support
• ModSecurity Web Application Firewall integration
• Reverse proxy support
• Load-balancer support
• Python / WSGI support
• Python virtual environments
• Hosted Applications registry for dependent QPKGs
• Runtime diagnostics
• Security audit
• Configuration snapshots
• Transactional validation and rollback
• Detailed Apache, PHP and application logs
• Responsive dark Web interface
• 20 interface languages
• x86_64 and ARM64 support

Hosted Applications

Apache86 can act as the shared Web runtime for other QPKG packages.

Dependent QPKGs can declare their own:

• DocumentRoot
• Apache modules
• PHP extensions
• PHP-FPM pool
• Virtual Host
• backend service
• health check

through an Apache86 application manifest.

Application files remain inside the dependent QPKG. They are not copied into the Apache86 Web directory.

This allows Apache86 and hosted applications to be installed, upgraded or removed independently.

The Apache86 interface can show which applications depend on specific Apache modules or PHP extensions and warn before a required component is disabled.

Included PHP extensions

The core PHP build includes:

bcmath, bz2, calendar, ctype, curl, date, dba, dom, exif, FFI, fileinfo, filter, ftp, gd, gettext, gmp, hash, iconv, intl, json, ldap, libxml, mbstring, mysqli, mysqlnd, odbc, openssl, pcntl, pcre, PDO, pdo_dblib, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pgsql, Phar, posix, random, readline, Reflection, session, shmop, SimpleXML, snmp, soap, sockets, sodium, SPL, sqlite3, standard, sysvmsg, sysvsem, sysvshm, tidy, tokenizer, uri, xml, xmlreader, xmlwriter, xsl, zip and Zend OPcache.

Additional PECL extensions

Apache86 also attempts to build and validate a large set of optional PHP extensions:

pspell, igbinary, msgpack, apcu, redis, memcached, memcache, mongodb, gnupg, yaml, ssh2, mailparse, timezonedb, oauth, ds, protobuf, ast, uuid, inotify, uploadprogress, excimer, lzf, zstd, simdjson, decimal, json_post, pcov, xdebug, amqp, rdkafka, event, ev, gearman, maxminddb, swoole, grpc, opentelemetry, raphf, http, xlswriter, csv, stats, trader, xattr, krb5, radius, hrtime and scrypt.

Additional conditional extensions include:

• imap
• imagick
• oci8
• pdo_oci
• sqlsrv
• pdo_sqlsrv

depending on source compatibility and the availability of their required external libraries or client SDKs.

Xdebug and PCOV are installed disabled by default to avoid unnecessary runtime overhead.

Because PECL compatibility can change between PHP versions and architectures, Apache86 generates an exact extension inventory during the build so the installed package can report which optional modules were successfully built and loaded.

Database connectivity

Apache86 includes support for:

• MySQL / MariaDB
• PostgreSQL
• SQLite
• ODBC
• FreeTDS / Microsoft SQL compatible connections
• Oracle when Oracle Instant Client is available
• Microsoft SQL Server native PHP drivers when Microsoft ODBC Driver is available
• MongoDB through PECL

Security

Apache86 includes:

• authenticated management interface
• CSRF protection
• secure management sessions
• TLS support
• ModSecurity integration
• configuration validation before reload
• transactional configuration updates
• automatic rollback
• module dependency protection
• Hosted Application manifest validation
• path validation
• health checks
• security diagnostics
• detailed audit logs

Sensitive diagnostic pages such as phpinfo() are accessible only after management authentication and are not exposed as public PHP files.

Default ports

• HTTP: 18080
• HTTPS: 18443
• Management UI: 12408
• PHP-FPM FastCGI: 127.0.0.1:19086

The private PHP-FPM endpoint is not exposed to the network.

Requirements

• QNAP QTS 6 or later
• QuTS hero 6 or later
• x86_64 or ARM64 NAS

Typical uses

Apache86 is suitable for:

• PHP Web applications
• CMS platforms
• private cloud applications
• custom QPKG Web interfaces
• reverse proxies
• Python WSGI applications
• development environments
• self-hosted services
• shared Web infrastructure for multiple QPKGs

Quick start

After installation, open the Apache86 management interface and authenticate using the credentials generated during initial setup.

You can then:

1. create or import a Virtual Host,
2. configure PHP and PHP-FPM,
3. enable the required modules and extensions,
4. configure HTTPS,
5. deploy your Web application,
6. verify it using Diagnostics, Audit and Logs.

Apache86 preserves user configuration across package upgrades and validates configuration changes before applying them.

Last update: 14 October 2026