ServerTokens Prod/ServerSignature Off
reddit / selfhosted

----------------------------------------------------------------------
thirtyfivedollarbill · 2023-12-20 16:51

Self hosted noob and experimenting with apache. Maybe Im doing this
wrong but when running nmap Im still seeing the server version and OS
even though Ive set the tokens as the title list in the global config
file. if I set these tokens in any of the virtual host config files
apache refused to restart and I get an error stating tokens cannot be
set in virtual host. Am I missing something ? And thank you guys for
the sub and the information here, If it wasnt for you guys I would
have never thought to host even though my setup is week, its a set up
and something to learn on

----------------------------------------------------------------------
KD_done · 2023-12-20 17:09

Anything within the  is regarding the behavior of the HTTP request
incomming.. and how to handle it.

As the software ID (tag) is set on the start of the application, you
need to add/change it for the worker config .. which is not inside the
Virtualhost :)

At "ServerTokens Minimal" in either the apache2.conf or security.conf,
and give apache as whole a restart, and you should be able to see the
results.

----------------------------------------------------------------------
thirtyfivedollarbill · 2023-12-20 19:50

Thank you KD, worked perfectly

----------------------------------------------------------------------
KD_done · 2023-12-20 19:52

Nice one :D