Hide nginx version from the dockerfile headers

This is achieved by inserting the 'server_tokens off' setting into the nginx configuration file
vantage6 · Jan 12, 2024 · 7fbfde9 · 7fbfde9
1 parent d1cf36c
commit 7fbfde9
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -12,5 +12,10 @@ RUN npm run build --prod
 FROM nginx:alpine
 COPY --from=node /app/dist/vantage6-UI /usr/share/nginx/html
 
+
+# add option to not share server info to nginx config file. Be sure to do this
+# in the http block, which is achieved by matching that line
+RUN sed -i '/http {/a \ \ \ \ server_tokens off;' /etc/nginx/nginx.conf
+
 # When the container starts, replace the env.js with values from environment variables and then startup app
 CMD ["/bin/sh",  "-c",  "envsubst < /usr/share/nginx/html/assets/env.template.js > /usr/share/nginx/html/assets/env.js && exec nginx -g 'daemon off;'"]