Disable server version in nginx

[Martin Vogel]

The version of the nginx server is not disabled by the playbook.

I see the nginx version nginx/1.24.0 in the web browser console.

Please add server_tokens off; in the customizer template.

connections-automation/roles/third_party/nginx-install/templates/customizer.conf.j2

Lines 15 to 26 in 9eb050f

 server { 
         listen          443 ssl; 
         server_name {{ inventory_hostname }}; 
         ssl_certificate {{ __nginx_crt_file }}; 
         ssl_certificate_key {{ __nginx_key_file }}; 
         ssl_session_cache    shared:SSL:1m; 
         ssl_session_timeout  5m; 
         ssl_protocols TLSv1.2; 
  
         ssl_ciphers  HIGH:!aNULL:!MD5; 
         ssl_prefer_server_ciphers  on; 
  

[paul.nott]

Hi Martin, thank you for the feedback. An internal ticket has been been created for this issue.