Page MenuHomeVyOS Platform

Nginx - disable software version reporting
In progress, NormalPublicFEATURE REQUEST

Description

Do not report the nginx version.

Under the # HTTP Options, we need to add:
server_tokens off;

Details

Version
-
Is it a breaking change?
Behavior change
Issue type
Unspecified (please specify)

Related Objects

StatusSubtypeAssignedTask
OpenFEATURE REQUESTNone
In progressFEATURE REQUESTmwheeler

Event Timeline

syncer changed the task status from Open to In progress.
syncer triaged this task as Normal priority.
vyosbot added a project: Restricted Project.Oct 14 2024, 8:16 AM
dmbaturin edited projects, added VyOS Rolling; removed Restricted Project.Oct 14 2024, 8:52 AM
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Behavior change.
dmbaturin changed Issue type from Unspecified (please specify) to behavior-change.

I wonder if we should not always disable this. I see no reason in exposing this information.

c-po changed Issue type from behavior-change to Unspecified (please specify).
c-po added a project: VyOS 1.5 Circinus.

Usually I'm not a fan of changing default behavior, but I agree that there probably isn't much value in knowing the server version with how vyos manages the nginx config as a black box.

Is that the direction you'd like to go?

Canceling PR 4273 because it has several commits that go in the wrong direction. Will submit a new PR with a different approach.