From 1f73332dd9768b26a33415a0299757de26ea32d6 Mon Sep 17 00:00:00 2001
From: Marek Miklewicz <86836305+marsonpl@users.noreply.github.com>
Date: Sat, 21 May 2022 14:32:28 +0200
Subject: [PATCH] Create security-headers.conf

---
 security-headers.conf | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 security-headers.conf

diff --git a/security-headers.conf b/security-headers.conf
new file mode 100644
index 0000000..8dd60f6
--- /dev/null
+++ b/security-headers.conf
@@ -0,0 +1,17 @@
+ProxyTimeout 1800
+
+TraceEnable off
+Header append X-FRAME-OPTIONS "SAMEORIGIN"
+FileETag None
+
+<IfModule mod_headers.c>
+    Header set X-XSS-Protection "1; mode=block"
+</IfModule>
+
+<IfModule mod_headers.c>
+    Header edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
+</IfModule>
+
+Mutex posixsem
+ProtocolsHonorOrder On
+Protocols h2 h2c http/1.1