LAMP is a web application stack consisting of Linux, Apache, MySQL, and PHP. Apache serves as the HTTP web server, MySQL provides the relational database backend, and PHP processes server-side scripts to generate dynamic content. Together, these components form a widely used platform for hosting content management systems, e-commerce applications, and custom web services.

This article explains how to install the LAMP stack on an Ubuntu 26.04 server, configure Apache to process PHP requests through PHP-FPM, secure the server with firewall rules and a Let's Encrypt SSL certificate, and test the stack with a sample PHP application that queries a MySQL database.

Prerequisites

Before you begin, you need to:

• Have access to an Ubuntu 26.04 server instance as a non-root user with sudo privileges.
• Have a domain A record pointing to the server's public IP address. For example, app.example.com.

Install Apache

The default Ubuntu 26.04 APT repositories include the Apache web server package. The following steps install Apache and verify that the service is running.

1. Update the APT package index.

   console Copy

   $ sudo apt update
   

   Explain Code

2. Install Apache.

   console Copy

   $ sudo apt install apache2 -y
   

   Explain Code

3. Enable Apache to start automatically at boot time.

   console Copy

   $ sudo systemctl enable apache2
   

   Explain Code

4. Start the Apache service.

   console Copy

   $ sudo systemctl start apache2
   

   Explain Code

5. Verify that Apache is active and running.

   console Copy

   $ sudo systemctl status apache2
   

   Explain Code

   The output should display active (running), confirming that the Apache web server is operational.

Install MySQL

MySQL is included in the default Ubuntu 26.04 repositories. The following steps install the database server, enable the service, and run the secure installation script to harden the default configuration.

1. Install the MySQL server package.

   console Copy

   $ sudo apt install mysql-server -y
   

   Explain Code

2. Enable MySQL to start automatically at boot time.

   console Copy

   $ sudo systemctl enable mysql
   

   Explain Code

3. Start the MySQL service.

   console Copy

   $ sudo systemctl start mysql
   

   Explain Code

4. Verify that MySQL is active and running.

   console Copy

   $ sudo systemctl status mysql
   

   Explain Code

   The output should display active (running), confirming that the MySQL server is operational.

5. Run the MySQL secure installation script to remove insecure defaults.

   console Copy

   $ sudo mysql_secure_installation
   

   Explain Code

   Respond to each prompt as described below:

   • VALIDATE PASSWORD COMPONENT: Enter Y and press Enter to activate password validation.
   • Password Validation Policy: Enter 2 to require strong passwords.
   • Remove anonymous users?: Enter Y to delete anonymous database accounts.
   • Disallow root login remotely?: Enter Y to restrict root access to the local server.
   • Remove test database and access to it?: Enter Y to drop the default test database.
   • Reload privilege tables now?: Enter Y to refresh the privilege tables and apply all changes.

6. Open the MySQL server configuration file.

   console Copy

   $ sudo nano /etc/mysql/mysql.conf.d/mysqld.cnf
   

   Explain Code

7. Add the following directive under the [mysqld] section to activate the mysql_native_password authentication plugin.

   ini Copy

   mysql_native_password=ON
   

   Explain Code

   Save and close the file.

8. Restart MySQL to load the updated configuration.

   console Copy

   $ sudo systemctl restart mysql
   

   Explain Code

9. Access the MySQL console as the root system user.

   console Copy

   $ sudo mysql
   

   Explain Code

10. Set a strong password for the root account. Replace your_strong_password with a secure password that meets your validation policy.

    sql Copy

    mysql> ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'your_strong_password';
    

    Explain Code

11. Reload the privilege tables.

    sql Copy

    mysql> FLUSH PRIVILEGES;
    

    Explain Code

12. Exit the MySQL console.

    sql Copy

    mysql> EXIT;
    

    Explain Code

Install PHP

PHP-FPM (FastCGI Process Manager) enables Apache to process PHP scripts by forwarding requests through a Unix socket. The following steps install PHP, PHP-FPM, and essential modules for the LAMP stack.

1. Install PHP, PHP-FPM, and common extensions.

   console Copy

   $ sudo apt install php php-fpm php-mysql php-cli libapache2-mod-php -y
   

   Explain Code

   The command installs the following packages:

   • php-fpm: Manages PHP worker processes for handling web server requests.
   • php-mysql: Enables PHP to connect to MySQL databases.
   • php-opcache: Caches precompiled PHP scripts in memory for faster execution.
   • php-cli: Provides the PHP command-line interpreter.
   • libapache2-mod-php: Enables Apache to process PHP scripts directly.

2. Confirm the installed PHP version.

   console Copy

   $ php -v
   

   Explain Code

   Your output should be similar to the one below:

   PHP 8.5.2 (cli) (built: Jan 21 2026 17:35:28) (NTS)
   Copyright (c) The PHP Group
   Built by Ubuntu
   Zend Engine v4.5.2, Copyright (c) Zend Technologies
       with Zend OPcache v8.5.2, Copyright (c), by Zend Technologies

3. Enable PHP-FPM to start automatically at boot time.

   console Copy

   $ sudo systemctl enable php8.5-fpm
   

   Explain Code

4. Start the PHP-FPM service.

   console Copy

   $ sudo systemctl start php8.5-fpm
   

   Explain Code

5. Verify that PHP-FPM is active and running.

   console Copy

   $ sudo systemctl status php8.5-fpm
   

   Explain Code

   The output should display active (running), confirming that PHP-FPM is operational.

Configure Apache with PHP-FPM

Apache requires additional modules to forward PHP requests to PHP-FPM. The following steps enable the required modules and activate the PHP-FPM configuration.

1. Enable the Apache proxy and environment modules.

   console Copy

   $ sudo a2enmod proxy_fcgi setenvif
   

   Explain Code

2. Enable the PHP-FPM configuration for Apache.

   console Copy

   $ sudo a2enconf php8.5-fpm
   

   Explain Code

3. Restart Apache to apply the module changes.

   console Copy

   $ sudo systemctl restart apache2
   

   Explain Code

Set Up Firewall Rules

Uncomplicated Firewall (UFW) is active by default on Ubuntu 26.04. The following steps open ports for HTTP and HTTPS traffic.

1. Allow HTTP traffic on port 80.

   console Copy

   $ sudo ufw allow 80/tcp
   

   Explain Code

2. Allow HTTPS traffic on port 443.

   console Copy

   $ sudo ufw allow 443/tcp
   

   Explain Code

Configure Apache Virtual Host

Apache uses virtual host configurations to serve content based on the requested domain name. The following steps remove the default configuration, create a virtual host for your domain, and connect it to PHP-FPM.

1. Unlink the default Apache virtual host configuration.

   console Copy

   $ sudo a2dissite 000-default.conf
   

   Explain Code

2. Create a new virtual host configuration file. Replace app.example.com with your actual domain.

   console Copy

   $ sudo nano /etc/apache2/sites-available/app.example.com.conf
   

   Explain Code

3. Add the following configuration to the file. Replace app.example.com with your actual domain.

   ini Copy

   <VirtualHost *:80>
       ServerAdmin webmaster@app.example.com
       ServerName app.example.com
       DocumentRoot /var/www/app.example.com
   
       <Directory /var/www/app.example.com>
           Options Indexes FollowSymLinks
           AllowOverride All
           Require all granted
       </Directory>
   
       <FilesMatch \.php$>
           SetHandler "proxy:unix:/var/run/php/php8.5-fpm.sock|fcgi://localhost/"
       </FilesMatch>
   
       ErrorLog ${APACHE_LOG_DIR}/app.example.com_error.log
       CustomLog ${APACHE_LOG_DIR}/app.example.com_access.log combined
   </VirtualHost>
   

   Explain Code

   Save and close the file.

   Within the configuration:

   • ServerName: Defines the domain that triggers this virtual host.
   • DocumentRoot: Sets the directory from which Apache serves files.
   • <FilesMatch \.php$>: Forwards all PHP file requests to the PHP-FPM socket for processing.
   • ErrorLog and CustomLog: Store virtual host-specific error and access logs.

4. Create the web root directory for the virtual host.

   console Copy

   $ sudo mkdir -p /var/www/app.example.com
   

   Explain Code

5. Enable the new virtual host configuration.

   console Copy

   $ sudo a2ensite app.example.com.conf
   

   Explain Code

6. Test the Apache configuration for syntax errors.

   console Copy

   $ sudo apache2ctl configtest
   

   Explain Code

   The output should display Syntax OK.

7. Restart Apache to activate the virtual host.

   console Copy

   $ sudo systemctl restart apache2
   

   Explain Code

Secure the Server with SSL

SSL certificates encrypt communication between the client browser and the Apache web server over HTTPS. The following steps install Certbot and generate a trusted Let's Encrypt SSL certificate for your domain.

1. Install the Certbot Let's Encrypt client and the Apache plugin.

   console Copy

   $ sudo apt install certbot python3-certbot-apache -y
   

   Explain Code

2. Generate an SSL certificate for your domain. Replace app.example.com with your actual domain.

   console Copy

   $ sudo certbot --apache -d app.example.com --agree-tos
   

   Explain Code

   Follow the on-screen prompts to complete the certificate generation. Certbot automatically updates the Apache virtual host configuration to enable HTTPS.

3. Verify that the automatic renewal process is configured correctly.

   console Copy

   $ sudo certbot renew --dry-run
   

   Explain Code

Test the LAMP Stack

A working LAMP stack allows PHP to query data from MySQL and return dynamic content through Apache. The following steps create a sample database, insert a test record, and build a PHP application that retrieves and displays the data in a web browser.

1. Log in to the MySQL console as the root user.

   console Copy

   $ mysql -u root -p
   

   Explain Code

   Enter the root password you configured earlier.

2. Create a new database named example_db.

   sql Copy

   mysql> CREATE DATABASE example_db;
   

   Explain Code

3. Create a database user named example_user with a strong password. Replace strong_password with your desired password.

   sql Copy

   mysql> CREATE USER 'example_user'@'localhost' IDENTIFIED BY 'strong_password';
   

   Explain Code

4. Grant the user full privileges on the example_db database.

   sql Copy

   mysql> GRANT ALL PRIVILEGES ON example_db.* TO 'example_user'@'localhost';
   

   Explain Code

5. Reload the privilege tables.

   sql Copy

   mysql> FLUSH PRIVILEGES;
   

   Explain Code

6. Switch to the example_db database.

   sql Copy

   mysql> USE example_db;
   

   Explain Code

7. Create a table named messages with an auto-incrementing ID and a text column.

   sql Copy

   mysql> CREATE TABLE messages (
            id INT AUTO_INCREMENT PRIMARY KEY,
            content VARCHAR(255) NOT NULL
            );
   

   Explain Code

8. Insert a sample record into the table.

   sql Copy

   mysql> INSERT INTO messages (content) VALUES ('Hello World from LAMP Stack');
   

   Explain Code

9. Verify that the record exists.

   sql Copy

   mysql> SELECT * FROM messages;
   

   Explain Code

   Your output should be similar to the one below:

   +----+-----------------------------+
   | id | content                     |
   +----+-----------------------------+
   |  1 | Hello World from LAMP Stack |
   +----+-----------------------------+
   1 row in set (0.00 sec)

10. Exit the MySQL console.

    sql Copy

    mysql> EXIT;
    

    Explain Code

11. Create a PHP test file in the web root directory.

    console Copy

    $ sudo nano /var/www/app.example.com/test.php
    

    Explain Code

12. Add the following PHP code to the file. Replace strong_password with the example_user password you set earlier.

    php Copy

    <?php
    $servername = "localhost";
    $username = "example_user";
    $password = "strong_password";
    $dbname = "example_db";
    
    $conn = new mysqli($servername, $username, $password, $dbname);
    
    if ($conn->connect_error) {
        die("Database connection failed: " . $conn->connect_error);
    }
    
    $sql = "SELECT content FROM messages";
    $result = $conn->query($sql);
    
    if ($result->num_rows > 0) {
        $row = $result->fetch_assoc();
        echo "<h1>" . htmlspecialchars($row["content"]) . "</h1>";
    } else {
        echo "<h1>No records found.</h1>";
    }
    
    $conn->close();
    ?>
    

    Explain Code

    Save and close the file.

    This script connects to the example_db database, queries the messages table, and displays the result as an HTML heading.

13. Access the test page in a web browser. Replace app.example.com with your actual domain.

    https://app.example.com/test.php

    The browser displays the message Hello World from LAMP Stack, confirming that Apache, MySQL, and PHP are working together.

Conclusion

You have deployed and secured the LAMP stack on an Ubuntu 26.04 server. Apache serves web requests, PHP-FPM processes dynamic content, and MySQL manages the application data. This stack supports multiple virtual hosts and integrates with frameworks such as Laravel and WordPress. For more configuration options, refer to the following resources:

• Apache documentation
• MySQL documentation
• PHP documentation