nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-01-21 07:55:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

apache: Disable mod_status

Browse Source 
Prevent leaking private info through Tor onion service or Pagekite.

Based on 822c322d20d12f81c6cfca47b66f900542a5aac2.

Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
This commit is contained in:
James Valleroy 2020-08-26 09:40:36 -04:00
parent 7295a6d9cc
commit 18f9bc8c28
No known key found for this signature in database
GPG Key ID: 77C0C75E7B650808
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
actions/apache
View File

@ -122,6 +122,9 @@ def subcommand_setup(arguments):
webserver.enable('proxy_fcgi', kind='module') webserver.enable('proxy_fcgi', kind='module')
webserver.enable('rewrite', kind='module') webserver.enable('rewrite', kind='module')
# Disable /server-status page to avoid leaking private info.
webserver.disable('status', kind='module')
# switch to mod_ssl from mod_gnutls # switch to mod_ssl from mod_gnutls
webserver.disable('gnutls', kind='module') webserver.disable('gnutls', kind='module')
webserver.enable('ssl', kind='module') webserver.enable('ssl', kind='module')