since they mostly have to do with proper Apache or nginix configuration,

your assumption is wrong here. I have to deal with multiple instances of this web-server and noone can guarantee the configuration is proper. I want to check this configuration, the availability of common handlers, the closed doors to some insider's data and proper redirection to some known queries.