diff --git a/setup/web.sh b/setup/web.sh
index 4e974ea8..ce421842 100755
--- a/setup/web.sh
+++ b/setup/web.sh
@@ -80,6 +80,10 @@ if [ -L /etc/init.d/php-fastcgi ]; then
 	apt-get -y purge php5-cgi #NODOC
 fi
 
+# Don't expose the php version
+tools/editconf.py /etc/nginx/fastcgi_params \
+	 "fastcgi_param PHP_VALUE \"expose_php"="Off\";"
+
 # Remove obsoleted scripts. #NODOC
 # exchange-autodiscover is now handled by Z-Push. #NODOC
 for f in webfinger exchange-autodiscover; do #NODOC