ansible-role-httpd: install HTTPd server

This Ansible role aims at installing the Apache HTTPd HTTP server on RHEL/CentOS.

Role variables

mod_headers

• httpd_headers_xss_protection: "1; mode=block": sets the X-XSS-Protection header.
• httpd_headers_x_content_type_options: "nosniff": sets the X-Content-Type-Options header.
• httpd_headers_referer_policy: "strict-origin": sets the Referrer-Policy header.
• httpd_headers_csp: "": sets the Content-Security-Policy header. This is undefined by default.
• httpd_headers_xframe_options: "SAMEORIGIN": sets the X-Frame-Options header.
• httpd_headers_feature_policy: "": sets the Feature-Policy header. This is undefined by default.
• httpd_headers_hsts: "max-age=15552001; includeSubDomains;": sets the HTTP Strict Transport Security header.

mod_ssl

• httpd_ssl_cipher_order: "on": sets the SSLHonorCipherOrder option.
• httpd_ssl_protocol: sets the SSLProtocol option.
• httpd_ssl_cipher_suite: sets the SSLCipherSuite option.
• httpd_ssl_compression: "off": sets the SSLCompression option.
• httpd_ssl_session_tickets: "off": sets the SSLSessionTickets option.

Please, refer to the HTTPd document on TLS encryption and take a look at the Mozilla SSL Configuration Generator.

mod_security

• httpd_security_server_tokens: "Prod": sets the ServerTokens option.
• httpd_security_signature: "Off": sets the ServerSignature option.
• httpd_security_secserver_signature: "": sets the SecServerSignature within from the security2_module.