I want to limit /server-status to only work from localhost, where do I set such directive? Code: <Location "/server-status"> SetHandler server-status Require ip 127.0.0.1 </Location>
That's not ispconfig specific, you can basically use any global apache config file like apache2.conf or httpd.conf, or preferrably create a new one in conf.d or conf-enabled folder.
Thank you, I noticed that mod_status already had a directive set to localhost by default which is great I had some older machines that hadn't had their Apache configs updated for a few years, so I thought mod_status was still leaking data by default.