add response headers

To harden the Apache web server on appserver, follow these steps:

sudo yum install httpd -y
sudo sed -i 's/^Listen 80/Listen 6400/' /etc/httpd/conf/httpd.conf
sudo systemctl start httpd
sudo systemctl enable httpd

This installs Apache, updates the configuration to listen on port 6400, and ensures the service starts on boot.

echo "Welcome to the mycorp Industries!" | sudo tee /var/www/html/index.html

This creates the required index.html file.

Edit the Apache configuration file:

sudo nano /etc/httpd/conf/httpd.conf

Add the following lines inside the <VirtualHost> block or globally:

Header set X-XSS-Protection "1; mode=block"
Header always set X-Frame-Options "SAMEORIGIN"
Header set X-Content-Type-Options "nosniff"

Save and exit.

sudo systemctl restart httpd

Run:

curl -I http://localhost:6400

You should see the headers in the response.

For more details, check out this guide or this tutorial. Let me know if you need further customization! 🚀