From e9c0f3ab9693d0606dde44e8e51cb84766deade2 Mon Sep 17 00:00:00 2001
From: Aidan Fitzgerald <duckjr159@gmail.com>
Date: Fri, 27 Jul 2018 00:31:17 -0400
Subject: [PATCH] Security features

---
 roles/lokole/templates/lokole.conf.j2 | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/roles/lokole/templates/lokole.conf.j2 b/roles/lokole/templates/lokole.conf.j2
index 5c3f96fb7..3587d26de 100644
--- a/roles/lokole/templates/lokole.conf.j2
+++ b/roles/lokole/templates/lokole.conf.j2
@@ -7,5 +7,13 @@ Alias {{ lokole_url }}/static {{ lokole_install_path }}
 <Directory {{ lokole_install_path }}>
     Options Indexes FollowSymLinks
     AllowOverride All
+
+    # Don't allow modifications in static directory
     Require all granted
+    <LimitExcept GET HEAD OPTIONS>
+        Require all denied
+    </LimitExcept>
 </Directory>
+
+# Disable TRACE to prevent cross-site tracing
+TraceEnable off