In default NGINX configuration, the Server header banner is ON which exposes what version of Nginx you are using. This is considered as information leakage vulnerability. If you are working on auditing or fixing a security issue, then you will be asked to get rid of a version as part of hardening & security.

Implementation

Go to nginx/conf folder Take a backup of a configuration file Add the following in nginx.conf under server section

Restart Nginx webserver

Verification

You can use an online tool Header Checker or developer tools inbuilt in the browser to examine the header.

As you can see, no more version is shown. I hope this helps and if you are looking to learn Nginx then check out this course by Ray Viljoen.

Remove Version from Server Header Banner in nginx - 97Remove Version from Server Header Banner in nginx - 8Remove Version from Server Header Banner in nginx - 5Remove Version from Server Header Banner in nginx - 92Remove Version from Server Header Banner in nginx - 87Remove Version from Server Header Banner in nginx - 55Remove Version from Server Header Banner in nginx - 83