Raspberry pi zero Apache2 and WPAD

[JonathanLee]

Hello fellow Netgate community members can you please help?

I have purchased a Raspberry PI Zero for use as a WPAD. I have it configured it works Microsoft, Apple products find the proxy.

My question is does anyone know what settings should be changed on Apache to make it secure? I assume default is not secure.

I have seen this guide looks good
https://geekflare.com/cybersecurity/apache-web-server-hardening-security/

Please yet me know if anyone has security recommendations to stop pivots and other issues with use of an external wpad provided over appache.

[JonathanLee]

I changed over to lighttpd it is more streamline for what I need Apache seemed like overkill