ServerAdmin webmaster@localhost DocumentRoot /var/www/html/public AllowOverride All Require all granted Options -Indexes +FollowSymLinks Header always set X-Content-Type-Options "nosniff" Header always set Referrer-Policy "strict-origin-when-cross-origin" ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined