使用以下/etc/nginx/sites-available/default檔案配置，我似乎無法獲取Server標題以洗掉 Phusion Passenger 版本。這可能會按預期作業，因為它成功洗掉了 nginx 版本，但它沒有洗掉 Phusion 乘客詳細資訊
我也無法隱藏X-Powered-By標題
這是一個詳細的 curl 回應示例
$ curl https://my.website.com -v
...
> GET / HTTP/1.1
> Host: my.website.com
> User-Agent: curl/7.79.1
> Accept: */*
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Content-Type: application/json
< Date: Mon, 13 Jun 2022 22:01:50 GMT
< Server: nginx Phusion Passenger(R) 6.0.14
< Status: 200 OK
< Vary: Accept-Encoding, Origin
< X-Powered-By: Phusion Passenger(R) 6.0.14
< Content-Length: 52
< Connection: keep-alive
<
* Connection #0 to host my.website.com left intact
"OK"
/etc/nginx/sites-available/default
server {
listen 80 default_server;
listen [::]:80 default_server;
if ($http_x_forwarded_proto = 'http'){
return 301 https://$host$request_uri;
}
passenger_enabled on;
root ...;
server_name _;
server_tokens off;
location ~ /\.(?!well-known) {
deny all;
}
location / {
proxy_hide_header X-Powered-By;
passenger_ruby ...;
passenger_base_uri /;
passenger_app_root ...;
passenger_document_root ...;
passenger_min_instances ...;
}
}
uj5u.com熱心網友回復：
從 Phusion 自己得到以下答案
passenger_show_version_in_header off;
https://www.phusionpassenger.com/docs/references/config_reference/nginx/#passenger_show_version_in_header
轉載請註明出處，本文鏈接：https://www.uj5u.com/yidong/492389.html
上一篇：我的Nginx服務正在運行，如果我運行curllocalhost它會顯示登錄頁面HTML。但無法從ec2IP訪問
下一篇：我無法獲得正確的單應點