I am soon launching a website but I want it to be secured / private for testing. It is on its real domain now; I allready added a htaccess authentification (with htpasswd) . i'm on apache2 / ubuntu 16.04
I thought of using a2dissite whenever I'm done working on it at the end of the day, so that it's not even possible to reach the domain / display the page.
I enabled these in my apache2 config file:
ServerTokens Prod
ServerSignature Off
TraceEnable off
and :
<Directory /var/www/html>
Options -Indexes
</Directory>
What other things can be done to enhance security and even making the site totally private ?
