getgrav / docker-grav

Official Docker Image for Grav
https://getgrav.org
199 stars 123 forks source link

Improve security #22

Closed rouja closed 4 years ago

rouja commented 4 years ago

Hi,

It's not recommended to let php and apache announce themself in the http headers for security raison. This config remove X-Powered-By: PHP/7.3.16 from http headers and replace Server: Apache/2.4.38 (Debian) by Server: Apache.

Let me know if I need to do something specific before to be merged.

Thanks