Files
bpfire/config/httpd/global.conf
Peter Müller 59fa881ea7 httpd: disable sending ETag header completely
These cause caching trouble and pose a potential security risk due to
exposing inode numbers of files within the Apache site directories on an
IPFire machine.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:20:17 +00:00

15 lines
337 B
Plaintext

Timeout 300
ServerSignature off
UseCanonicalName off
ServerTokens Prod
LogLevel warn
CustomLog /var/log/httpd/access_log combined
Include /etc/httpd/conf/hostname.conf
HostnameLookups off
AddHandler cgi-script .cgi
EnableSendfile Off
FileETag None
# Always unset HTTP_PROXY variable, https://httpoxy.org
RequestHeader unset Proxy early