Configuring ServerTokens & ServerSignature?

[murgero]

Is there a way to properly configure Apache in the LAMP app to remove the server signature and also the server tokens?

I can make the change in the apache configuration file, however these get overwritten.

Adding the following to apache.conf (at the bottom of the file) would be enough:

ServerSignature Off
ServerTokens Prod

[girish]

@murgero You can put ServerSignature Off in htaccess to make it persist. I put some docs at https://cloudron.io/documentation/apps/lamp/#apache-settings.

ServerTokens seems to be in apache config only, so we will have to fix the package to support it. I have opened https://git.cloudron.io/cloudron/lamp-app/issues/13 to look into it

[murgero]

@girish Ah I didn't see that in the documents, good stuff. Thanks!

[girish]

@murgero I added it after you asked the question