• Add X-Frame-Options Header

https://geekflare.com/secure-apache-from-clickjacking-with-x-frame-options/

• Disable HTTP Method Track

To disable these methods, add the following lines for each virtual
host in your configuration file :

    RewriteEngine on
    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
    RewriteRule .* - [F]

Alternatively, note that Apache versions 1.3.34, 2.0.55, and 2.2
support disabling the TRACE method natively via the 'TraceEnable'
directive.

• Nginx Remove

https://askubuntu.com/questions/235347/what-is-the-best-way-to-uninstall-nginx