/etc/apache2/apache2.conf
> ServerTokens Prod
> ServerSignature Off

/etc/php5/apache2/php.ini
> expose_php = Off