feat(apache2): deploy best practices from h5bp