From fb2854c0b3ef77d1a4bdc8adbed637804ab63a72 Mon Sep 17 00:00:00 2001 From: Jake Howard Date: Tue, 21 Sep 2021 17:46:10 +0100 Subject: [PATCH 1/2] Disable server tokens This avoids unnecessary information exposure. Hiding the `Server` header altogether on nginx is notoriously difficult, but at least hiding the version hides some information which can be very useful in a security context. --- root/defaults/nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/root/defaults/nginx.conf b/root/defaults/nginx.conf index 61346711..15b5e803 100644 --- a/root/defaults/nginx.conf +++ b/root/defaults/nginx.conf @@ -21,7 +21,7 @@ http { tcp_nodelay on; keepalive_timeout 65; types_hash_max_size 2048; - # server_tokens off; + server_tokens off; # server_names_hash_bucket_size 64; # server_name_in_redirect off; From a0f5056971db69f7970612d3bf6e7f527f675714 Mon Sep 17 00:00:00 2001 From: Eric Nemchik Date: Sun, 24 Oct 2021 09:26:11 -0500 Subject: [PATCH 2/2] Update nginx.conf --- root/defaults/nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/root/defaults/nginx.conf b/root/defaults/nginx.conf index 15b5e803..aee5fbcf 100644 --- a/root/defaults/nginx.conf +++ b/root/defaults/nginx.conf @@ -1,4 +1,4 @@ -## Version 2021/06/15 - Changelog: https://github.com/linuxserver/docker-baseimage-alpine-nginx/commits/master/root/defaults/nginx.conf +## Version 2021/10/24 - Changelog: https://github.com/linuxserver/docker-baseimage-alpine-nginx/commits/master/root/defaults/nginx.conf user abc; worker_processes 4;