Minimal secure Apache vhost (TLS, headers, logs)
Goal: a single, sane vhost. TLS 1.2/1.3, basic security headers, OCSP stapling, HSTS (opt-in), tight logs, and no server leaks. 1) Modules & hardening sudo a2enmod ssl headers rewrite socache_shmcb # Hide version echo “ServerTokens Prod\nServerSignature Off” | sudo tee /etc/apache2/conf-available/hideversion.conf sudo a2enconf hideversion 2) Vhost <VirtualHost *:443> ServerName example.com DocumentRoot /var/www/html SSLEngine on SSLProtocol … Read more