Zobrazení zdroje stránky Apache secure



/etc/apache2/conf-available/security.conf

<pre>
ServerTokens Prod
ServerSignature Off
</pre>

/etc/apache2/sites-enabled/default-ssl.conf
<pre>
UseCanonicalName On
</pre>
or
<pre>
RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L]
</pre>

<pre>
# HSTS
# a2enmod headers
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
</pre>

[[Category:Pentests]]