diff --git a/docker/init.sh.cfg b/docker/init.sh.cfg
index b2834da677f84b929c2363b6889b2ddc7670bc9d..73cea4bd0b27b1e12060530467d371b1271409f4 100644
--- a/docker/init.sh.cfg
+++ b/docker/init.sh.cfg
@@ -2,7 +2,9 @@
 #
 # settings for init.sh and base values for replacements in template files
 # This script is sourced by init.sh ... this file is bash syntax
-# 
+#
+# DOCS: https://os-docs.iml.unibe.ch/docker-php-starterkit/Configuration/init.sh.cfg.html
+#
 # ----------------------------------------------------------------------
 # 2021-12-17  <axel.hahn@iml.unibe.ch>
 # ======================================================================
@@ -14,8 +16,9 @@ APP_PORT=8001
 
 APP_APT_PACKAGES="git unzip zip"
 
-#APP_APACHE_MODULES="rewrite"
-APP_APACHE_MODULES=""
+# headers is needed to set security headers.
+# APP_APACHE_MODULES="headers rewrite"
+APP_APACHE_MODULES="headers"
 
 APP_PHP_VERSION=8.2
 # APP_PHP_MODULES="curl pdo_mysql mbstring xml zip xdebug"