diff --git a/files/httpd-vhost-global.conf b/files/httpd-vhost-global.conf
index ef06ee3..87cd012 100644
--- a/files/httpd-vhost-global.conf
+++ b/files/httpd-vhost-global.conf
@@ -4,4 +4,12 @@
     Require all granted
 </Directory>
 
+# Some security settings (hide version, disable trace, etc.)
+ServerTokens Prod
+ServerSignature Off
+TraceEnable Off
+
+# Lower SSL logging to avoid excessive noise
+LogLevel warn ssl:warn
+
 # Listen directives will be added here by entrypoint.sh based on WEB_PORT_HTTP and WEB_PORT_HTTPS: