Nginx disable server tokens

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>
opensearch-project · May 6, 2024 · 4de70d1 · 4de70d1
1 parent a602a8e
commit 4de70d1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/infrastructure/lib/constructs/opensearchNginxProxyCognito.ts b/infrastructure/lib/constructs/opensearchNginxProxyCognito.ts
@@ -178,6 +178,7 @@ export class OpenSearchMetricsNginxCognito extends Construct {
                 ssl_protocols TLSv1.2 TLSv1.3;
                 ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
                 ssl_prefer_server_ciphers on;
+                server_tokens off;
                 
                 add_header Strict-Transport-Security "max-age=47304000; includeSubDomains";
                 add_header X-Content-Type-Options "nosniff";

diff --git a/infrastructure/lib/stacks/opensearchNginxProxyReadonly.ts b/infrastructure/lib/stacks/opensearchNginxProxyReadonly.ts
@@ -164,6 +164,7 @@ export class OpenSearchMetricsNginxReadonly extends Stack {
                 ssl_protocols TLSv1.2 TLSv1.3;
                 ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
                 ssl_prefer_server_ciphers on;
+                server_tokens off;
            
                 add_header Strict-Transport-Security "max-age=47304000; includeSubDomains";
                 add_header X-Content-Type-Options "nosniff";