Apache o nginx for webserver

for a security standpoint either of them can be fine. Most of my servers are configured using Apache and Cloudlinux ( Very similar to centOS7) Using CloudLinux with Cage FS is a pretty solid setup. Trapping all hosting accounts in a virtual cage to prevent data leak from one client to another also allowing the proper resource limits help keep resource hogging sites limited if they are abusing your server.