Merge pull request #312 from ikarus23/master

hide nginx version an OS information for better privacy
This commit is contained in:
Joshua Tauberer 2015-02-01 14:25:39 -05:00
commit f945a1bc6b
1 changed files with 9 additions and 0 deletions

View File

@ -7,6 +7,11 @@ server {
server_name $HOSTNAME;
root /tmp/invalid-path-nothing-here;
# Improve privacy: Hide version an OS information on
# error pages and in the "Server" HTTP-Header.
server_tokens off;
# Redirect using the 'return' directive and the built-in
# variable '$request_uri' to avoid any capturing, matching
# or evaluation of regular expressions.
@ -20,6 +25,10 @@ server {
server_name $HOSTNAME;
# Improve privacy: Hide version an OS information on
# error pages and in the "Server" HTTP-Header.
server_tokens off;
ssl_certificate $SSL_CERTIFICATE;
ssl_certificate_key $SSL_KEY;
include /etc/nginx/nginx-ssl.conf;