UPD: i like it now.

container-filesystem/etc/httpd/conf.d/application.conf

@@ -0,0 +1,18 @@
+WSGIDaemonProcess wsgi-daemon display-name=wsgi-daemon python-home=/srv/application/python python-path=/srv/application/django
+
+Alias /static/ "/srv/application/django/var/www/static/"
+<Directory "/srv/application/django/var/www/static">
+    AllowOverride None
+    Require all granted
+</Directory>
+
+WSGIScriptAlias / "/srv/application/django/main/wsgi.py"
+<Directory "/srv/application/django/main">
+    WSGIProcessGroup wsgi-daemon
+    WSGIPassAuthorization On
+    AllowOverride None
+    Options FollowSymLinks
+    <Files wsgi.py>
+        Require all granted
+    </Files>
+</Directory>

container-filesystem/etc/httpd/conf.d/defaults.conf

@@ -0,0 +1,4 @@
+# /etc/httpd/conf.d/defaults.conf
+
+ServerTokens Prod
+ErrorLog /dev/stderr

container-filesystem/etc/httpd/conf.d/wsgi.conf

@@ -0,0 +1 @@
+WSGISocketPrefix run/wsgi

container-filesystem/etc/httpd/conf.d/zzz-lock-down.conf

@@ -0,0 +1,15 @@
+# /etc/httpd/conf.d/zzz-lock-down.conf
+
+<Directory "/var/www">
+    Require all denied
+</Directory>
+<Directory "/var/www/html">
+    Require all denied
+</Directory>
+<Directory "/var/www/cgi-bin">
+    Require all denied
+</Directory>
+<Directory "/usr/share/httpd/icons">
+    Require all denied
+</Directory>
+

container-filesystem/etc/httpd/conf.modules.d/00-base.conf

@@ -0,0 +1,33 @@
+#
+# This file loads most of the modules included with the Apache HTTP
+# Server itself.
+#
+
+LoadModule access_compat_module modules/mod_access_compat.so
+LoadModule actions_module modules/mod_actions.so
+LoadModule alias_module modules/mod_alias.so
+LoadModule allowmethods_module modules/mod_allowmethods.so
+LoadModule auth_basic_module modules/mod_auth_basic.so
+LoadModule authn_core_module modules/mod_authn_core.so
+LoadModule authn_file_module modules/mod_authn_file.so
+LoadModule authz_core_module modules/mod_authz_core.so
+LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
+LoadModule authz_host_module modules/mod_authz_host.so
+LoadModule authz_user_module modules/mod_authz_user.so
+LoadModule autoindex_module modules/mod_autoindex.so
+LoadModule deflate_module modules/mod_deflate.so
+LoadModule dir_module modules/mod_dir.so
+LoadModule env_module modules/mod_env.so
+LoadModule expires_module modules/mod_expires.so
+LoadModule headers_module modules/mod_headers.so
+LoadModule info_module modules/mod_info.so
+LoadModule log_config_module modules/mod_log_config.so
+LoadModule mime_magic_module modules/mod_mime_magic.so
+LoadModule mime_module modules/mod_mime.so
+LoadModule negotiation_module modules/mod_negotiation.so
+LoadModule request_module modules/mod_request.so
+LoadModule rewrite_module modules/mod_rewrite.so
+LoadModule setenvif_module modules/mod_setenvif.so
+LoadModule status_module modules/mod_status.so
+LoadModule unixd_module modules/mod_unixd.so
+