Disable X-Powered-By PHP version header via expose_php flag

[jakejarvis]

Hello! This is a small change to the four php.ini files that would remove the X-Powered-By header, which publicly exposes the current PHP version we're including.

Advertising this isn't a huge deal but it's arguably a small security risk if an exploit becomes available for an outdated Matomo instance, and disabling it in production is considered a good idea these days.

Thanks!

[jakejarvis]

Just noticed this would close issue #167 as well. 😊

[OskarsPakers]

Any chance to get this merged? It`s simple, straightforward and low risk.

[williamdes]

🏓 Also looking for this one to add a bit more security

[williamdes]

Solution:

    volumes:
#      - ./config:/var/www/html/config:rw
#      - ./logs:/var/www/html/logs
      - matomo:/var/www/html
      - ./php.ini:/usr/local/etc/php/conf.d/php-matomo-custom.ini:ro

Add a custom file with the line added in this PR