nixos/httpd: disable HTTP TRACE method by default

This commit is contained in:
Aaron Andersen 2019-02-07 14:13:45 -05:00
parent dd610ce84f
commit 70be5b6bb2

View File

@ -376,6 +376,8 @@ let
Include ${httpd}/conf/extra/httpd-multilang-errordoc.conf
Include ${httpd}/conf/extra/httpd-languages.conf
TraceEnable off
${if enableSSL then sslConf else ""}
# Fascist default - deny access to everything.