S

security-headers

PHP + Apache app that shows your public IP at / and returns JSON at /api, with hardened headers/CSP and Docker Compose for local and production runs.