Customize apache2.conf with libapache2-mod-security2 to remove the 'Server' response header from all requests. This sample was made to deploy on Azure Linux Webapps with the use of the custom startup script set under /home/site
.
apache2.conf
is used to copy over the existing conf file under/etc/apache2/apache2.conf
so we can bring our own configuration- In
apache2.conf
we setSecServerSignature
to " ", in conjunction withlibapache2-mod-security2
instartup.sh
, this effectively removes theServer
header on all responses.