3

I'm having trouble hiding my server header (nginx 1.2.1).

I've google'd it and it seems all I have to do is to set server_tokens off; in nginx.conf. But doing this only removed the version number, but it still shows nginx as the server.

I've seen there's a module called HttpHeadersMoreModule but I don't need all those fancy options. All I want is to hide the header.

How can I manually hide the header completely?

Improve this question
3
  • Hiding the header does not get rid of security problems. You would do much better to keep nginx up to date.
    – Michael Hampton
    Oct 31, 2013 at 16:44
  • Yeah I noticed it wasn't the latest release. I assumed it would be, I'll update it later.
    – justanotherhobbyist
    Oct 31, 2013 at 17:24
  • There is not only security: removing Server header also removes a few extra bytes from your response
    – Victor
    Aug 20, 2018 at 17:04

1 Answer 1

Reset to default
5

If you don't want to use the module to remove the header then you will have to modify the source to not send it. There's no option in nginx to not send the nginx server header. On a side note, removing the header probably won't prevent people from figuring out you use nginx as each server has certain behaviours that can be probed.

Improve this answer
1

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .