Question

I am trying to hide this headers for the production server but without success :

 X-Powered-By: Phusion Passenger (mod_rails/mod_rack) 3.0.7
 X-Runtime: 0.021429
 Server: nginx/1.0.0 + Phusion Passenger 3.0.7 (mod_rails/mod_rack)

Using :

- Rails 3.0.9
- Passenger 3.0.7
- Nginx 1.0.0

Any ideas ?

Answer 1

To remove nginx Server: header you could use server_tokens off directive.

For other headers try using Headers More nginx module:

more_set_headers 'Server: anon'; # replace the default 'nginx + Passenger'
more_set_headers 'X-Powered-By'; # clear header entirely