3 ms·
Caddy is great. My only complaint is they insist on sending a: Server: caddy Header that is impossible to turn off since it's hardcoded here: https://gith
by hn92726819 3y ago
Caddy is great. My only complaint is they insist on sending a:
Server: caddy
Header that is impossible to turn off since it's hardcoded here: https://github.com/caddyserver/caddy/blob/master/modules/caddyhttp/server.go#L260 https://github.com/caddyserver/caddy/blob/master/modules/cad...
The developer's annoying response is "it doesnt improve privacy or security, so we won't give you the option to remove it".
- mholt 3y agoIt's not impossible to turn off. NGINX does this too, but you have to recompile NGINX to disable that header. With Caddy, you just need: header -Server in your config.
- hn92726819 3y agoThis doesnt work for http redirects to https. I couldn't find any way to disable the server header in those responses without patching.
- Freaky 3y agoThey insist on adding it to the standard response path, but they're happy for you to remove it: header -Server However as this isn't global configuration it'll tend to pop back up in implicit configs like HTTP redirects and error handling if not overridden.
- hn92726819 3y agoIs it possible to disable it on http redirects? I haven't found any way to do that