Use common-ssl-HSTS
Use http-pkp-sources.debian.org
+ Protocols h2 http/1.1
+
<IfModule mod_userdir.c>
UserDir disabled
</IfModule>
# reset'd with IndexOptionsReset, but only starting from Apache
# 2.3).
+ Require all granted
<Files ~ "^\.ht">
# override default (Debian) setting in /etc/apache2/apache2.conf
# we want to list .htaccess and friends if they are part of packages.