Header set X-Content-Type-Options: "nosniff"
Header set X-Frame-Options: "sameorigin"

ServerTokens Prod

<VirtualHost *:80>
  ServerName localhost
  ServerAdmin support@websight.nl
  DocumentRoot /var/www/html

  <Directory /var/www/html/>
      Options -Indexes +FollowSymLinks +MultiViews
      AllowOverride All
      Order deny,allow
      Allow from all
  </Directory>

  ErrorLog /var/log/apache2/vhost-error.log
  CustomLog /var/log/apache2/vhost-access.log combined
</VirtualHost>

<IfModule mod_ssl.c>
    <VirtualHost *:443>
      ServerName localhost
      ServerAdmin support@websight.nl
      DocumentRoot /var/www/html

      SSLEngine on
      SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
      SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
      SSLCompression off
      SSLProtocol All -SSLv2 -SSLv3
      SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

      <Directory /var/www/html/>
          Options -Indexes +FollowSymLinks +MultiViews
          AllowOverride All
          Order deny,allow
          Allow from all
      </Directory>

      ErrorLog /var/log/apache2/ssl-vhost-error.log
      CustomLog /var/log/apache2/ssl-vhost-access.log combined

    </VirtualHost>
</IfModule>