sorok nginx server info

dalam internet ni banyak monyet. jadi sebagai sifat semula jadi seekor monyet. dia memang suka belek2 web app kau. dia buat info gathering lepas tu mula cari exploit. biasa la script kiddies.

so ini cara aku sorok info server nginx.

install nginx-extras dan edit nginx.conf add server_tokens off & more_clear_headers Server

apt install nginx-extras

http {

        ##
        # Basic Settings
        ##

        sendfile on;
        tcp_nopush on;
        types_hash_max_size 2048;
        server_tokens off;
        more_clear_headers Server

        # server_names_hash_bucket_size 64;
        # server_name_in_redirect off;

        include /etc/nginx/mime.types;
        default_type application/octet-stream;