Apache secure: Porovnání verzí
Skočit na navigaci
Skočit na vyhledávání
založena nová stránka s textem „/etc/apache2/conf-available/security.conf ''' ServerTokens Prod ServerSignature Off ''' Category:Pentests“ |
Bez shrnutí editace |
||
| (Nejsou zobrazeny 3 mezilehlé verze od stejného uživatele.) | |||
| Řádek 1: | Řádek 1: | ||
/etc/apache2/conf-available/security.conf | /etc/apache2/conf-available/security.conf | ||
<pre> | |||
ServerTokens Prod | ServerTokens Prod | ||
ServerSignature Off | ServerSignature Off | ||
</pre> | |||
/etc/apache2/sites-enabled/default-ssl.conf | |||
<pre> | |||
UseCanonicalName On | |||
</pre> | |||
or | |||
<pre> | |||
RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L] | |||
</pre> | |||
<pre> | |||
# HSTS | |||
# a2enmod headers | |||
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" | |||
</pre> | |||
[[Category:Pentests]] | [[Category:Pentests]] | ||
Aktuální verze z 24. 9. 2026, 12:07
/etc/apache2/conf-available/security.conf
ServerTokens Prod ServerSignature Off
/etc/apache2/sites-enabled/default-ssl.conf
UseCanonicalName On
or
RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L]
# HSTS # a2enmod headers Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"