Join the community today
Register Now

Removing / Hiding Nginx "X-Powered-By: centminmod";

Discussion in 'Centmin Mod User Tutorials & Guides' started by skringjer, Feb 17, 2023.

  1. skringjer

    skringjer NoobMaster69

    203
    24
    18
    Apr 21, 2019
    Ratings:
    +40
    Local Time:
    12:30 AM
    Nginx 1.21.6
    MariaDB 10.3.x
    Greetings everyone, i really hate making this thread since @eva2000 works so hard on giving us the BEST LEMP stack. And i think we should give credit where its due.

    But recently on few of my websites, my competitors are spying on my websites, taking away the hard-work that i did from years by just taking the best configs, plugins that i use.

    And i started hiding everything from them. I also hide more_set_headers "X-Powered-By: centminmod"; and when i see the headers i do not see them anymore, using this guide.

    Code:
    # sets Centmin Mod headers via headers more nginx module
    # https://github.com/openresty/headers-more-nginx-module
    # don't remove the first 2 lines as centmin mod checks to see if they're
    # missing and re-adds them anyway. Just uncomment the 3rd & 4th lines
    # which is used to override the Server header to what you want = nginx
    # and remove the X-Powered-By header + restart nginx service
    # do not disable headers more nginx module itself as it's required for
    # other centmin mod features like redis nginx level caching & letsencrypt
    # integration in vhosts created by addons/acmetool.sh
    So here is what i did
    Code:
    more_set_headers "Server: nginx centminmod";
    more_set_headers "X-Powered-By: centminmod";
    more_set_headers "Server: Litespeed";
    more_set_headers "X-Powered-By: LitespeedCustom";
    more_clear_headers "X-Powered-By";
    
    Now when i inspect element and see the headers, i can not see X-Powered by anymore. or if use curl --include no headers.


    However, if i use a website called wappalyzer, it shows webserver as Centminmod. 02.16.2023-21.19.37


    How can i hide these info, OS, Centmin, Webserver etc.
     
  2. skringjer

    skringjer NoobMaster69

    203
    24
    18
    Apr 21, 2019
    Ratings:
    +40
    Local Time:
    12:30 AM
    Nginx 1.21.6
    MariaDB 10.3.x
    So after digging more into wappalyzer, i think wappalyzer does not show the most recent info. It shows past site info that it collects may be. Not sure though.
     
  3. rdan

    rdan Well-Known Member

    5,438
    1,396
    113
    May 25, 2014
    Ratings:
    +2,184
    Local Time:
    3:30 AM
    Mainline
    10.2
    You are correct.
     
  4. eva2000

    eva2000 Administrator Staff Member

    52,657
    12,071
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,597
    Local Time:
    5:30 AM
    Nginx 1.25.x
    MariaDB 10.x
    Yeah it collects past info so not much you can do about that :)
     
  5. skringjer

    skringjer NoobMaster69

    203
    24
    18
    Apr 21, 2019
    Ratings:
    +40
    Local Time:
    12:30 AM
    Nginx 1.21.6
    MariaDB 10.3.x
    Got it, Thank you <3