sorry, this may be a long post to explain the idea properly... currently it seems you can only apply one apache / nginx snippet to each website, and php snippets only if they are required by an applied apache/nginx snippet, when viewing as a client. (option to choose just 1 single web configuration from an available list) multiple apache/nginx or php snippets can be applied as admin. some, are obvious and may be set server wide anyway... eg..HSTS, but to allow client choice for CSP, X-Frame-Options, X-Xss-Protection, X-Content-Type etc, along with eg different php file upload size limits.. just doing this for a couple of changes to CSP requires several nearly identical snippets, to have a few differences in X-Content-Type, and php file upload size limits, for each different CSP option exponentially increases the number of snippets needed to cover every possible slight diffference.. i think a better option would be to allow grouping snippets. and allowing clients to choose php snippets without having to pick a web configuration to apply them.. so instead, you can create snippets and group them into applicable groups, eg, create multiple snippets for different CSP settings, and create a group to assign these snippets to. create multiple snippets for different X-Xss-Protection settings, and create a group to assign these snippets to, create multiple snippets for different max_upload_filesize settings, and create a group to assign these snippets to. and allow the client to assign 1 snippet from each group so rather than having eg 10 diifferent snippets to combine different CSP, X-XSS, combinations with a max 50MB file upload limit, and another 10 different snippets to combine those identical sets of CSP and X-Xss combinations with a max 100MB file upload limit, and again for 200MB file upload limit etc.. just create all the different needed versions of CSP only snippets, the different needed versions of just X-Xss snippets, and the different needed versions of php upload_max_filesize snippets. in their own groups.. and let the client pick 1 from each to get their required combination it means lots of small snippets, but much fewer total snippets to cover all possible different options. can do all these small snippets as admin, and assign them as needed, but then the client has to ask admin to make any minor changes. otherwise it's create a massive list of snippets covering every possible combination to allow the client to go through the list and pick their specific web configuration themselves. assuming they can find it in the list, or even understand the list.
