Lock down Apache configuration

* Restrict access to a bare minimum