view modules/apache/templates/mod/info.conf.erb @ 106:ef0926ee389a puppet-3.6

Lock down Apache headers for security, based on https://securityheaders.io/
author IBBoard <dev@ibboard.co.uk>
date Sat, 14 May 2016 17:10:10 +0100
parents 37675581a273
children 675c1cc61eaf
line wrap: on
line source

<Location /server-info>
    SetHandler server-info
<%- if @restrict_access -%>
  <%- if scope.function_versioncmp([@apache_version, '2.4']) >= 0 -%>
    Require ip <%= Array(@allow_from).join(" ") %>
  <%- else -%>
    Order deny,allow
    Deny from all
    <%- if @allow_from and ! @allow_from.empty? -%>
      <%- @allow_from.each do |allowed| -%>
    Allow from <%= allowed %>
      <%- end -%>
    <%- else -%>
    Allow from 127.0.0.1
    Allow from ::1
    <%- end -%>
  <%- end -%>
<%- end -%>
</Location>