linuxserver / docker-letsencrypt

DEPRECATED: Please use linuxserver/swag instead
GNU General Public License v3.0
720 stars 172 forks source link

Nginx "hidden" by default? #481

Closed jsbrain closed 4 years ago

jsbrain commented 4 years ago

Hey, this is just a conceptual question:

Is the nginx server "hidden" using the default config so one cannot see that the content is served by the reverse proxy at all? I checked the headers etc. and I cannot find any indications that would reveal the nginx server in the response but I just wanted to make sure in case I'm missing something.

Could someone please tell me if the proxy is "invisible" by default and if not, what would I need to change to achieve that?

aptalca commented 4 years ago

I don't know what your end goal is, but the 404 page would give it away (among probably other ways)

jsbrain commented 4 years ago

My goal is to make the nginx absolutely invisible to the client. Thanks for the hint of the 404. Do you know of some edge cases of requests, that might set some headers that would definitely expose the nginx to the client?

LBegnaud commented 4 years ago

really not the forum for this kind of request. Cursory search shows you'll need a module which i believe is installed with this container:

https://stackoverflow.com/questions/24594971/how-to-changehide-the-nginx-server-signature

http {
    ...
    more_set_headers "Server: Your_New_Server_Name";
    server_tokens off; 
    ...
}
jsbrain commented 4 years ago

Ok thank you guys, that already helped a lot!