Apache secure: Porovnání verzí

Z wiki
Skočit na navigaci Skočit na vyhledávání
Bez shrnutí editace
Bez shrnutí editace
Řádek 12: Řádek 12:
or
or
RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L]
RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L]
# HSTS
# a2enmod headers
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"


[[Category:Pentests]]
[[Category:Pentests]]

Verze z 24. 9. 2026, 10:53


/etc/apache2/conf-available/security.conf

ServerTokens Prod ServerSignature Off

/etc/apache2/sites-enabled/default-ssl.conf UseCanonicalName On or RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L]

  1. HSTS
  2. a2enmod headers

Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"