apache2-hardening

It's a basic hardening. It will harden security.conf and apache2.conf. Check the TODO if you want to improve the hardening.

Variables

Check defaults/main.yml

Example Playbook

    - hosts: servers
      roles:
        - role: Lier0.apache2-hardening

Harden serving

Consider hardening of yours dir/loc as the example bellow:

        <Directory / >
            <LimitExcept GET POST>
                Options FollowSymLinks
                AllowOverride None
            </LimitExcept>
        </Directory>

# a2enmod headers

<IfModule mod_headers.c>
    Header set X-XSS-Protection: "1; mode=block"
    Header unset Server
    Header set X-Content-Security-Policy "allow 'self';"
    Header set X-Frame-Options DENY
    Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
    Header always append X-Frame-Options SAMEORIGIN
</IfModule>