Does apache sit in front of nodejs app?

Hi all!

In nodejs applications, does apache sit in front of the app, providing the modsecurity security layer?
If not, how can we do it to provide more security and also access logs?

Thanks!