# Apache: [authz_core:error] AH01630: client denied by server configuration: /var/www/html/

**Code:** `AH01630: client denied by server configuration` · **Category:** Nginx / Apache · **Seen on:** Apache, Linux

Apache 2.4 authorisation denied access to the directory (403) because no `Require all granted` applies.

## Meaning

Apache 2.4 replaced `Order/Allow/Deny` with `Require`. Add `<Directory /var/www/html> Require all granted </Directory>` in the vhost (and `AllowOverride All` if using .htaccess). Check parent `<Directory />` defaults, `Require ip` rules and `.htaccess` leftovers using 2.2 syntax.

## Common causes

- Missing `Require all granted`
- Config migrated from Apache 2.2 (Order/Allow)
- DocumentRoot outside the allowed `<Directory>`
- `Require ip` excluding your IP
- Alias target not authorised

## Quick fix

1. `<Directory /var/www/html> Require all granted </Directory>`
2. Replace `Order allow,deny / Allow from all` with `Require all granted`
3. Reload: `sudo apachectl configtest && sudo systemctl reload apache2`

## Detailed fix by platform

### Linux

1. `sudo apachectl -S && grep -rn "Require\|Order" /etc/apache2/sites-enabled/`

## How to diagnose

1. **Directive** — Require used?
2. **Version** — 2.4 syntax?
3. **Path** — Directory block covers it?

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/nginx-apache/apache-ah01630-client-denied-by-server-configuration)