http://blog.ivnish.com/ ru http://blog.ivnish.com/blog/113 <span>Apache: включить HSTS</span> <div class="field field--name-field-blog-tags field--type-entity-reference field--label-hidden field__items"> <div class="field__item"><a href="http://blog.ivnish.com/blog/tag/apache2" hreflang="ru">apache2</a></div> </div> <span><span>admin</span></span> <span><time datetime="2024-02-22T11:11:59+05:00" title="четверг, февраля 22, 2024 - 11:11">22.02.2024</time> </span> <div class="field field--name-body field--type-text-with-summary field--label-hidden field__item"><p>Нужно добавить в конфиг виртуального хоста</p> <pre><code class="language-plaintext">Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"</code></pre><p>А проверить через curl</p> <pre><code class="language-plaintext">curl -I https://www.example.com</code></pre></div> Thu, 22 Feb 2024 06:11:59 +0000 admin 113 at http://blog.ivnish.com http://blog.ivnish.com/blog/109 <span>Apache2 скрыть версию веб-сервера</span> <div class="field field--name-field-blog-tags field--type-entity-reference field--label-hidden field__items"> <div class="field__item"><a href="http://blog.ivnish.com/blog/tag/apache2" hreflang="ru">apache2</a></div> </div> <span><span>admin</span></span> <span><time datetime="2023-08-14T20:06:48+05:00" title="понедельник, августа 14, 2023 - 20:06">14.08.2023</time> </span> <div class="field field--name-body field--type-text-with-summary field--label-hidden field__item"><p>Проверка до/после</p> <pre><code class="language-plaintext">curl --head yourdomain.com wget --server-response --spider yourdomain.com</code></pre><p>В файле <strong>/etc/apache2/conf-enabled/security.conf</strong></p> <p>нужно <strong>ServerTokens</strong> установить в <strong>Prod</strong></p> <p>и <span class="copy-the-code-wrap copy-the-code-style-svg-icon copy-the-code-inside-wrap" data-copy-format="default" data-button-text="Copy" data-button-position="inside" data-button-copy-text="Copied!" data-style="svg-icon" data-button-title="Copy to Clipboard" data-selector="pre"><strong>ServerSignature</strong> в <strong>Off</strong></span></p> </div> Mon, 14 Aug 2023 15:06:48 +0000 admin 109 at http://blog.ivnish.com