lamp: protect apache fingerprintingv0.46.12

3 files changed, 14 insertions, 2 deletions

diff --git a/changelog.md b/changelog.md
index 881adb1f..d4584428 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,7 +1,11 @@
 
-[v0.46.10](https://github.com/nextcloud/nextcloudpi/commit/b2c809c) (2018-02-09) samba: create share per NC user
+[v0.46.12](https://github.com/nextcloud/nextcloudpi/commit/2eda867) (2018-02-15) lamp: protect apache fingerprinting
 
-[v0.46.9](https://github.com/nextcloud/nextcloudpi/commit/19ccdb4) (2018-02-13) letsencrypt: only call update-rc.d in docker builds
+[v0.46.11](https://github.com/nextcloud/nextcloudpi/commit/04ebdea) (2018-02-15) SSH: dont create user if it doesnt exist
+
+[v0.46.10](https://github.com/nextcloud/nextcloudpi/commit/0440d9f) (2018-02-09) samba: create share per NC user
+
+[v0.46.9 ](https://github.com/nextcloud/nextcloudpi/commit/19ccdb4) (2018-02-13) letsencrypt: only call update-rc.d in docker builds
 
 [v0.46.8 ](https://github.com/nextcloud/nextcloudpi/commit/354c767) (2018-02-12) preactivate useful apps for a selfhosted instance
 
diff --git a/etc/nextcloudpi-config.d/nc-nextcloud.sh b/etc/nextcloudpi-config.d/nc-nextcloud.sh
index 31607d9b..94d1d4d6 100644
--- a/etc/nextcloudpi-config.d/nc-nextcloud.sh
+++ b/etc/nextcloudpi-config.d/nc-nextcloud.sh
@@ -217,6 +217,10 @@ EOF
 </VirtualHost>
 EOF
 
+  # some added security
+  sed -i 's|^ServerSignature .*|ServerSignature Off|' /etc/apache2/conf-enabled/security.conf
+  sed -i 's|^ServerTokens .*|ServerTokens Prod|'      /etc/apache2/conf-enabled/security.conf
+
   echo "Setting up system..."
 
   ## SET LIMITS
diff --git a/update.sh b/update.sh
index 0b43fc01..68a010b6 100755
--- a/update.sh
+++ b/update.sh
@@ -245,6 +245,10 @@ Dpkg::Options {
 };
 EOF
 
+  # some added security
+  sed -i 's|^ServerSignature .*|ServerSignature Off|' /etc/apache2/conf-enabled/security.conf
+  sed -i 's|^ServerTokens .*|ServerTokens Prod|'      /etc/apache2/conf-enabled/security.conf
+
 } # end - only live updates
 
 exit 0