Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
charset.conf	269 B	-rw-r--r--	2024-09-29 18:51
javascript-common.conf	127 B	-rw-r--r--	2020-12-18 19:33
localized-error-pages.conf	3.1 KB	-rw-r--r--	2024-09-29 18:51
other-vhosts-access-log.conf	143 B	-rw-r--r--	2024-09-29 18:51
php8.1-fpm.conf	1.39 KB	-rw-r--r--	2026-05-14 15:46
phpmyadmin.conf	1.01 KB	-rw-r--r--	2023-02-08 12:57
security.conf	1.78 KB	-rw-r--r--	2024-09-29 18:51
serve-cgi-bin.conf	409 B	-rw-r--r--	2024-09-29 18:51

Rename

# Changing the following options will not really affect the security of the
# server, but might make attacks slightly more difficult in some cases.

#
# ServerTokens
# This directive configures what you return as the Server HTTP response
# Header. The default is 'Full' which sends information about the OS-Type
# and compiled in modules.
# Set to one of:  Full | OS | Minimal | Minor | Major | Prod
# where Full conveys the most information, and Prod the least.
#ServerTokens Minimal
ServerTokens OS
#ServerTokens Full

#
# Optionally add a line containing the server version and virtual host
# name to server-generated pages (internal error documents, FTP directory
# listings, mod_status and mod_info output etc., but not CGI generated
# documents or custom error documents).
# Set to "EMail" to also include a mailto: link to the ServerAdmin.
# Set to one of:  On | Off | EMail
#ServerSignature Off
ServerSignature On

#
# Allow TRACE method
#
# Set to "extended" to also reflect the request body (only for testing and
# diagnostic purposes).
#
# Set to one of:  On | Off | extended
TraceEnable Off
#TraceEnable On

#
# Forbid access to version control directories
#
# If you use version control systems in your document root, you should
# probably deny access to their directories.
#
# Examples:
#
#RedirectMatch 404 /\.git
#RedirectMatch 404 /\.svn

#
# Setting this header will prevent MSIE from interpreting files as something
# else than declared by the content type in the HTTP headers.
# Requires mod_headers to be enabled.
#
#Header set X-Content-Type-Options: "nosniff"

#
# Setting this header will prevent other sites from embedding pages from this
# site as frames. This defends against clickjacking attacks.
# Requires mod_headers to be enabled.
#
#Header set Content-Security-Policy "frame-ancestors 'self';"