Learn about Centmin Mod LEMP Stack today
Register Now

Removing / Hiding Nginx "X-Powered-By: centminmod";

Discussion in 'Centmin Mod User Tutorials & Guides' started by skringjer, Feb 17, 2023.

  1. skringjer

    skringjer NoobMaster69

    208
    26
    28
    Apr 21, 2019
    Ratings:
    +43
    Local Time:
    7:17 PM
    Nginx 1.21.6
    MariaDB 10.3.x
    Greetings everyone, i really hate making this thread since @eva2000 works so hard on giving us the BEST LEMP stack. And i think we should give credit where its due.


    But recently on few of my websites, my competitors are spying on my websites, taking away the hard-work that i did from years by just taking the best configs, plugins that i use.

    And i started hiding everything from them. I also hide more_set_headers "X-Powered-By: centminmod"; and when i see the headers i do not see them anymore, using this guide.

    Code:
    # sets Centmin Mod headers via headers more nginx module
    # https://github.com/openresty/headers-more-nginx-module
    # don't remove the first 2 lines as centmin mod checks to see if they're
    # missing and re-adds them anyway. Just uncomment the 3rd & 4th lines
    # which is used to override the Server header to what you want = nginx
    # and remove the X-Powered-By header + restart nginx service
    # do not disable headers more nginx module itself as it's required for
    # other centmin mod features like redis nginx level caching & letsencrypt
    # integration in vhosts created by addons/acmetool.sh
    So here is what i did
    Code:
    more_set_headers "Server: nginx centminmod";
    more_set_headers "X-Powered-By: centminmod";
    more_set_headers "Server: Litespeed";
    more_set_headers "X-Powered-By: LitespeedCustom";
    more_clear_headers "X-Powered-By";
    
    Now when i inspect element and see the headers, i can not see X-Powered by anymore. or if use curl --include no headers.

    However, if i use a website called wappalyzer, it shows webserver as Centminmod. 02.16.2023-21.19.37


    How can i hide these info, OS, Centmin, Webserver etc.
     
  2. skringjer

    skringjer NoobMaster69

    208
    26
    28
    Apr 21, 2019
    Ratings:
    +43
    Local Time:
    7:17 PM
    Nginx 1.21.6
    MariaDB 10.3.x
    So after digging more into wappalyzer, i think wappalyzer does not show the most recent info. It shows past site info that it collects may be. Not sure though.
     
  3. rdan

    rdan Well-Known Member

    5,446
    1,408
    113
    May 25, 2014
    Ratings:
    +2,201
    Local Time:
    10:17 PM
    Mainline
    10.2
    You are correct.
     
  4. eva2000

    eva2000 Administrator Staff Member

    54,548
    12,221
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,790
    Local Time:
    12:17 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Yeah it collects past info so not much you can do about that :)
     
  5. skringjer

    skringjer NoobMaster69

    208
    26
    28
    Apr 21, 2019
    Ratings:
    +43
    Local Time:
    7:17 PM
    Nginx 1.21.6
    MariaDB 10.3.x
    Got it, Thank you <3