anchor.diff:  # Secure Apache server as much as we can
   COPY secure.conf /etc/httpd/conf.d/secure.conf
   
  -# Disable unused modules
  +# Disable unused modules. It would be nice to disable more but
  +# it may make this container less portable.
  +# source: http://www.thegeekstuff.com/2011/03/apache-hardening/
   RUN sed -i \
              -e 's/LoadModule info_module/#LoadModule info_module/g' \
              -e 's/LoadModule userdir_module/#LoadModule userdir_module/g' \
  
positive.code:            -e 's/LoadModule version_module/#LoadModule version_module/g' \
              /etc/httpd/conf.modules.d/00-base.conf
  
  # systemd isn't used
  RUN rm -vf 00-systemd.conf
  
  # Configure SSL
  RUN sed -i -e 's/SSLProtocol.*/SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1/g' \
  
negative.code: # Make placeholder directories for the end user to mount against
  RUN mkdir -p /data/conf.d
  
  RUN yum -y --nogpgcheck install \
                                  httpd \
                                  mod_ssl \
                                  mod_security \
                                  mod_security_crs \
                                  aide && \
                                  yum clean all
  
  
  