Apache secure: Porovnání verzí
Skočit na navigaci
Skočit na vyhledávání
Bez shrnutí editace |
Bez shrnutí editace |
||
| (Není zobrazena jedna mezilehlá verze od stejného uživatele.) | |||
| Řádek 3: | Řádek 3: | ||
/etc/apache2/conf-available/security.conf | /etc/apache2/conf-available/security.conf | ||
<pre> | |||
ServerTokens Prod | ServerTokens Prod | ||
ServerSignature Off | ServerSignature Off | ||
</pre> | |||
/etc/apache2/sites-enabled/default-ssl.conf | /etc/apache2/sites-enabled/default-ssl.conf | ||
<pre> | |||
UseCanonicalName On | UseCanonicalName On | ||
</pre> | |||
or | or | ||
<pre> | |||
RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L] | RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L] | ||
</pre> | |||
<pre> | |||
# HSTS | |||
# a2enmod headers | |||
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" | |||
</pre> | |||
[[Category:Pentests]] | [[Category:Pentests]] | ||
Aktuální verze z 24. 9. 2026, 12:07
/etc/apache2/conf-available/security.conf
ServerTokens Prod ServerSignature Off
/etc/apache2/sites-enabled/default-ssl.conf
UseCanonicalName On
or
RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L]
# HSTS # a2enmod headers Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"