Hide server info for security hardening

jimsihk · TrafeX · commit 15dba6846f1c · 2022-09-07T11:08:24.000+02:00
diff --git a/config/nginx.conf b/config/nginx.conf
@@ -85,6 +85,11 @@ http {
         }
     }
     
+    # Hardening
+    proxy_hide_header X-Powered-By;
+    fastcgi_hide_header X-Powered-By;
+    server_tokens off;
+    
     gzip on;
     gzip_proxied any;
     gzip_types text/plain application/xml text/css text/js text/xml application/x-javascript text/javascript application/json application/xml+rss;
diff --git a/config/php.ini b/config/php.ini
@@ -1,2 +1,3 @@
 [Date]
 date.timezone="UTC"
+expose_php= Off

Original file line number	Diff line number	Diff line change
`@@ -85,6 +85,11 @@ http {`
`85`	`85`	`}`
`86`	`86`	`}`
`87`	`87`
	`88`	`+ # Hardening`
	`89`	`+ proxy_hide_header X-Powered-By;`
	`90`	`+ fastcgi_hide_header X-Powered-By;`
	`91`	`+ server_tokens off;`
	`92`	`+`
`88`	`93`	`gzip on;`
`89`	`94`	`gzip_proxied any;`
`90`	`95`	`gzip_types text/plain application/xml text/css text/js text/xml application/x-javascript text/javascript application/json application/xml+rss;`