ErrorLog /dev/stderr LogLevel warn # LogLevel info rewrite:trace3 # Permission denied: AH00099: could not create /var/run/apache2.pid PidFile /tmp/apache2.pid IncludeOptional mods-enabled/*.load IncludeOptional mods-enabled/*.conf Timeout 128 KeepAlive On MaxKeepAliveRequests 32 KeepAliveTimeout 8 Listen 8080 # # Listen 443 # # # Listen 443 # ServerTokens Prod ServerSignature Off FileETag None TraceEnable off Header always set X-Frame-Options "sameorigin" Header set X-XSS-Protection "1; mode=block" LogFormat "%{%Y-%m-%dT%H:%M:%S%z}t %h \"%r\" %>s" neat CustomLog /dev/stdout neat # TODO ssl # TODO sendfile ? DocumentRoot /koel AllowOverride None Require all denied AccessFileName .htaccess Require all denied # TODO check Options -Indexes -Includes -FollowSymLinks +SymLinksIfOwnerMatch # TODO check AllowOverride All Require all granted IncludeOptional conf-enabled/*.conf