From 5e99bc8c45a870f37f3aa229a87a7eb8c5357be3 Mon Sep 17 00:00:00 2001
From: Dmitry Gammel <cactozzz93@gmail.com>
Date: Wed, 12 Aug 2026 00:33:07 +0500
Subject: [PATCH] =?UTF-8?q?=D0=A3=D0=B1=D1=80=D0=B0=D1=82=D1=8C=20=D0=B2?=
 =?UTF-8?q?=D0=B5=D1=80=D1=81=D0=B8=D1=8E=20nginx=20=D0=B8=D0=B7=20=D0=B7?=
 =?UTF-8?q?=D0=B0=D0=B3=D0=BE=D0=BB=D0=BE=D0=B2=D0=BA=D0=B0=20Server?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

server_tokens off — не отдаём точный номер версии наружу, мелкое
затруднение для разведки перед атакой на известные CVE.
---
 nginx/nginx.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index fbf09ef..42b6b8d 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -10,6 +10,9 @@ server {
     root /usr/share/nginx/html;
     index index.html;
 
+    # не светим точную версию nginx в заголовке Server и в error-страницах
+    server_tokens off;
+
     add_header X-Content-Type-Options nosniff always;
     add_header X-Frame-Options DENY always;
     add_header Referrer-Policy strict-origin-when-cross-origin always;