Google/Apache PageSpeed With HTTPS, HTTP/2 (Apache2, Ubuntu 18.04)

Unfortunately after Snowden Revelations, Google is not reliable about data privacy and data security. Google Approached to Move PageSpeed to Apache Incubator. However, Many Modules Do Use Google’s CDNs to serve the assets (which demands thorough knowledge to tweak to change). As still, CDN locations are not made to null URL by default, it will have precaution for the sites and site-owners who want highest privacy of the users. Here is Guide Install Google/Apache PageSpeed With HTTPS, HTTP/2 With Apache2 on Ubuntu 18.04. At present, Google/Apache PageSpeed works out of the box with HTTPS. Previously, we published guide on how to install Apache2 on Ubuntu 18.04 and configure for HSTS, HTTPS, HTTP/2 etc. Although, this guide is for Ubuntu 18.04, it does work on Ubuntu 16.04.

mod_http2 provides an HTTP2 variable which can be used to provide a different configuration for HTTP2 sessions to disable some filters in such sessions. Of course whether using PageSpeed with bleeding edge modules is practical that need testing on own production site. The module erratically does break basic padlock test. Also, if you are using a reverse proxy (like we have guide to use Nginx to add IPv6 with reverse proxy) in front that needs extra settings (we discussed in this guide). However, yet it may not respect directive and demands your random manual checking.

 

How To Install Google/Apache PageSpeed With HTTPS, HTTP/2 With Apache2

 

After installation, you’ll have a file named /etc/default/mod-pagespeed, with the below content :

If you do not want to use the Google repository, before installing the .deb package run:

If you do not understand what it means, you can skip the above step and proceed:

You can download the latest, stable version of mod_pagespeed module for Apache from the official site :

At time of writing, that is :

Install with the below commands :

mod_pagespeed_ap24.so got activated, with pagespeed.conf, pagespeed_libraries.conf config files. Also a standalone JavaScript minifier pagespeed_js_minify got installed. To uninstall on need, you need to run simple :

Now, go to /etc/apache2/sites-available/ and run an ls -al :

There will be your virtual host config file for HTTPSS site. Within virtual host scope, add :

Run configtest :

More settings, including for HTTP/2, shown on official documentation :

And restart Apache :

If you curl your website to fetch header, you’ll see Pagespeed header :

Open the configuration file :

At present, default settings enough good to test how good or bad it is. You need many changes for pagespeed_admin, one is (change your-ip-address to your current IP of internet connection) :

Save and restart Apache :

You should see web admin http://your-ip-address/pagespeed_admin. You should read documentation :

I informed you to manually check webpages randomly to find whether PageSpeed is breaking your SSL padlock.