diff --git a/apache/flags.sls b/apache/flags.sls
new file mode 100644
index 0000000000000000000000000000000000000000..f303b98d5e21d85963d505bd8aefc1a44e449591
--- /dev/null
+++ b/apache/flags.sls
@@ -0,0 +1,28 @@
+{% from "apache/map.jinja" import apache with context %}
+
+{% if salt['grains.get']('os_family') == 'Suse' or salt['grains.get']('os') == 'SUSE' %}
+
+include:
+  - apache
+ 
+{% for flag in salt['pillar.get']('apache:flags:enabled', []) %}
+a2enflag {{ flag }}:
+  cmd.run:
+    - unless: egrep "^APACHE_SERVER_FLAGS=" /etc/sysconfig/apache2 | grep {{ flag }}
+    - require:
+      - pkg: apache
+    - watch_in:
+      - module: apache-restart
+{% endfor %}
+
+{% for module in salt['pillar.get']('apache:flags:disabled', []) %}
+a2disflag -f {{ flag }}:
+  cmd.run:
+    - onlyif: egrep "^APACHE_SERVER_FLAGS=" /etc/sysconfig/apache2 | grep {{ flag }}
+    - require:
+      - pkg: apache
+    - watch_in:
+      - module: apache-restart
+{% endfor %}
+
+{% endif %}
diff --git a/pillar.example b/pillar.example
index bfbd68e0c11c4850c68912a7b6d6147faf9faf7f..db94b0edfce41e62beea50e8050abdc067fe6955 100644
--- a/pillar.example
+++ b/pillar.example
@@ -291,6 +291,12 @@ apache:
     disabled:  # List modules to disable
       - rewrite
 
+  flags:
+    enabled:  # List server flags to enable
+      - SSL
+    disabled: # List server flags to disable
+      - status
+
   # KeepAlive: Whether or not to allow persistent connections (more than
   # one request per connection). Set to "Off" to deactivate.
   keepalive: 'On'