Hide server info for security hardening

2026-04-22 00:29:10 +08:00 · 2022-08-15 20:09:23 +08:00
parent 0be32d3131
commit 15dba6846f
2 changed files with 6 additions and 0 deletions
--- a/config/nginx.conf
+++ b/config/nginx.conf
@@ -85,6 +85,11 @@ http {
        }
    }
    
+    # Hardening
+    proxy_hide_header X-Powered-By;
+    fastcgi_hide_header X-Powered-By;
+    server_tokens off;
+    
    gzip on;
    gzip_proxied any;
    gzip_types text/plain application/xml text/css text/js text/xml application/x-javascript text/javascript application/json application/xml+rss;
--- a/config/php.ini
+++ b/config/php.ini
@@ -1,2 +1,3 @@
 [Date]
 date.timezone="UTC"
+expose_php= Off