## Fix cgi directory access

# "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
# CGI directory exists, if you have that configured.
#
# ovirt does not use this directory , so deny access to ot
<Directory "/var/www/cgi-bin">
    AllowOverride None
    Options None
    Require all denied
</Directory>


## Fix for HTTP trace
# Disable HTTP/1.1 TRACE requests as a part of server hardening
TraceEnable Off

## Fix for permission policy
#set permission policy for header
Header always set Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()"

## Fix for server header
# Disable server header
ServerSignature Off
ServerTokens Prod

## Fix for server renegotiation option
SSLOptions -OptRenegotiate

## Fix for hiding icons directory
Alias /icons/ "/usr/share/httpd/icons/"

<Directory "/usr/share/httpd/icons">
    Options -Indexes
    AllowOverride None
    Require all granted
</Directory>

## Fix for http smuggling
Protocols h2 http/1.1

