Mitigate HTTPOXY vulnerability, see https://httpoxy.org - and provide quick...

Mitigate HTTPOXY vulnerability, see https://httpoxy.org - and provide quick script to adjust Apache config

defaults/main.yml

@@ -7,6 +7,7 @@ apache_modules:
   - actions
   - alias
   - expires
+  - headers
   - proxy
   - proxy_fcgi
   - rewrite

tasks/apache.yml

@@ -38,6 +38,7 @@
     mode='644'
   notify:
     - "Apache | Restart Apache"
+  tags: 'Config'
 
 - name: "Apache | Create Global Redirect Configuration"
   template:
@@ -48,6 +49,7 @@
     mode='644'
   notify:
     - "Apache | Restart Apache"
+  tags: 'Config'
 
 - name: "Apache | Create Global Deny Configuration"
   template:
@@ -58,6 +60,7 @@
     mode='644'
   notify:
     - "Apache | Restart Apache"
+  tags: 'Config'
 
 - name: "Apache | Install SSL certificates"
   copy:

templates/etc-apache2-conf-available-global-redirect

@@ -12,3 +12,5 @@ RewriteCond %{HTTP_REFERER} ^([^.]+.)*{{ referer }} [NC,OR]
 {% endfor %}
 RewriteCond %{HTTP_REFERER} ^([^.]+.)*dummy\.referer [NC]
 RewriteRule .* - [F,L]
+
+RequestHeader unset Proxy early