HTTP Security Headers for Port 80/443

[metrovps]

Hello,

How to set HTTP headers for global vhost ? I mean, When we hit the DirectAdmin installed IP, it opens /var/www/html path. I'm using OpenLiteSpeed.

DirectAdmin has feature to set Strict-Transport header for port 2222 but not on Port 80/443.

I need specifically the headers from https://securityheaders.com/ when I hit the IP (http/https - 80/443). Can it be set ? If yes, then from where for OpenLiteSpeed WebServer ??

Regards.

 

[ram0ng1]

I share the same issue.

I use apache/nginx

After following the documentation: https://docs.directadmin.com/webser....html#adding-security-headers-to-get-a-rating I got an A+ grade. But it doesn't work on IP (http 80,https 443)

 

[Richard G]

But it doesn't work on IP (http 80,https 443)

Which is normal because you can not get an ssl certificate on an ip.

 

[ram0ng1]

Which is normal because you can not get an ssl certificate on an ip.

I meant "redirect" ?

 

[zEitEr]

For IPs the following files are responsible:

Apache/LiteSpeed:

- /etc/httpd/conf/ips.conf
- /etc/httpd/conf/extra/httpd-vhosts.conf

Nginx:

- /etc/nginx/nginx-vhosts.conf

OpenLiteSpeed:

- /usr/local/lsws/conf/httpd-vhosts.conf

But do not edit them directly, you should find and use corresponding templates under custombuild/ and templates/ folders.

p.s. Actually there is no much sense to add those headers for IPs.

 

[alinajafi]

Hi
web-server=open lite speed
and I used in htaccess not worked
and how can I use?

 

[zEitEr]

and I used in htaccess not worked

OpenLiteSpeed does not support all features of htaccess, only limited support is provided. If you need to customize a single virtual host, then you could use

- DirectAdmin interface at an admin level: Admin Panel -> Admin Settings -> Customize Httpd Configurations. Details can be found here: https://docs.directadmin.com/webser...ing-custom-httpd-conf-code-to-the-virtualhost
- Or customize templates, if you want it for all hosted domains: https://docs.directadmin.com/webser...set-up-webmail-example-com-with-openlitespeed

 

[alinajafi]

For Openlitespeed follow : https://www.vpsbasics.com/cp/how-to-add-http-security-headers-with-openlitespeed-and-directadmin/