Page MenuHomeVyOS Platform
Create Task
Maniphest T6734

Disable nginx software version reporting
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Do not report the nginx version.

Under the # HTTP Options, we need to add:
server_tokens off;

Details

Version
-
Is it a breaking change?
Behavior change
Issue type
Feature (new functionality)

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenFEATURE REQUESTNoneT6733 Do not report software versions root task
 ResolvedFEATURE REQUESTViacheslavT6734 Disable nginx software version reporting

Event Timeline

syncer created this task.Sep 24 2024, 11:36 PM
syncer changed the task status from Open to In progress.
syncer triaged this task as Normal priority.
pasik subscribed.Sep 25 2024, 6:16 AM
vyosbot added a project: Restricted Project.Oct 14 2024, 8:16 AM
dmbaturin edited projects, added VyOS Rolling; removed Restricted Project.Oct 14 2024, 8:52 AM
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Behavior change.
dmbaturin changed Issue type from Unspecified (please specify) to behavior-change.
syncer removed a project: VyOS 1.5 Circinus.Nov 1 2024, 8:10 PM
syncer moved this task from Need Triage to Backlog - Feature Requests on the VyOS Rolling board.
syncer added a subscriber: Global Notifications.Nov 1 2024, 9:19 PM
mwheeler subscribed.Jan 3 2025, 4:10 PM

PR: https://github.com/vyos/vyos-1x/pull/4273

c-po subscribed.Jan 3 2025, 4:26 PM

I wonder if we should not always disable this. I see no reason in exposing this information.

c-po assigned this task to mwheeler.Jan 3 2025, 4:26 PM
c-po changed Issue type from behavior-change to Unspecified (please specify).
c-po added a project: VyOS 1.5 Circinus.
mwheeler added a comment.Jan 3 2025, 4:47 PM

Usually I'm not a fan of changing default behavior, but I agree that there probably isn't much value in knowing the server version with how vyos manages the nginx config as a black box.

Is that the direction you'd like to go?

c-po added a comment.Jan 5 2025, 6:33 AM

https://github.com/vyos/vyos-1x/pull/4273

mwheeler added a comment.Jan 6 2025, 3:19 PM

Canceling PR 4273 because it has several commits that go in the wrong direction. Will submit a new PR with a different approach.

mwheeler added a comment.Jan 6 2025, 5:35 PM

Replacement PR: https://github.com/vyos/vyos-1x/pull/4282

Viacheslav reassigned this task from mwheeler to o.kuchmystyi.Sep 25 2025, 3:20 AM
Viacheslav claimed this task.Jan 27 2026, 10:04 PM
Viacheslav added subscribers: o.kuchmystyi, Viacheslav.

PR https://github.com/vyos/vyos-1x/pull/4957

Viacheslav mentioned this in rVYOSONEX8fcaa97be4d7: T6734: Nginx disable software version reporting.Jan 29 2026, 3:16 PM
Restricted Repository Identity mentioned this in rVYOSONEX8944d5e4aea0: Merge pull request #4957 from sever-sever/T6734.Jan 29 2026, 3:16 PM
Viacheslav closed this task as Resolved.Feb 3 2026, 1:57 PM
Viacheslav moved this task from Backlog - Feature Requests to Completed on the VyOS Rolling board.
Viacheslav edited projects, added VyOS 1.5 Circinus (1.5-stream-2025-Q4); removed VyOS 1.5 Circinus.
dmbaturin renamed this task from Nginx - disable software version reporting to Disable nginx software version reporting.Feb 12 2026, 6:42 PM
dmbaturin edited projects, added VyOS 1.5 Circinus (2026.02); removed VyOS 1.5 Circinus (1.5-stream-2025-Q4).
dmbaturin changed Issue type from Unspecified (please specify) to Feature (new functionality).