Bug#977014: apache2-doc: please do not enable apache2-doc site (or even better: remove it at all)

[Christoph Anton Mitterer <calestyo@scientia.net>]

Package: apache2-doc
Version: 2.4.46-2
Severity: wishlist


Hi.

I'd like to propose not to enable the apache2-doc "site" or
even better completely remove it's config or move it to some location
in /u/s/d/apache2/examples/ .

Why?

First, there is typically never every any reason to actually host it.
People who really want this online and not just locally available (where it's
"more secure") can always just use https://httpd.apache.org/docs/ .
And any admin who wants to have access to the very specific version for
his current package, can just use the local files.

The current config places a pretty generic alias, "/manual", into the main
server, which will be active in any vhost, unless specifically overridden.
Absolutely no reason to do this, and in fact it's even like that this
could disturb other content being served.

There's a long standing history of needlessly automatically enabled stuff
causing security issues (e.g. mod_status).
The same principle applies here: why enabling something without any need?


Cheers,
Chris.