apache: Disable mod_status

Prevent leaking private info through Tor onion service or Pagekite.

Based on 822c322d20d12f81c6cfca47b66f900542a5aac2.

Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
This commit is contained in:
James Valleroy 2020-08-26 09:40:36 -04:00
parent 7295a6d9cc
commit 18f9bc8c28
No known key found for this signature in database
GPG Key ID: 77C0C75E7B650808

View File

@ -122,6 +122,9 @@ def subcommand_setup(arguments):
webserver.enable('proxy_fcgi', kind='module')
webserver.enable('rewrite', kind='module')
# Disable /server-status page to avoid leaking private info.
webserver.disable('status', kind='module')
# switch to mod_ssl from mod_gnutls
webserver.disable('gnutls', kind='module')
webserver.enable('ssl', kind='module')