{"action":"created","issue":{"url":"https://api.github.com/repos/mholt/caddy/issues/910","repository_url":"https://api.github.com/repos/mholt/caddy","labels_url":"https://api.github.com/repos/mholt/caddy/issues/910/labels{/name}","comments_url":"https://api.github.com/repos/mholt/caddy/issues/910/comments","events_url":"https://api.github.com/repos/mholt/caddy/issues/910/events","html_url":"https://github.com/mholt/caddy/issues/910","id":163130451,"number":910,"title":"Header removal does not work on Server","user":{"login":"HazCod","id":5222512,"avatar_url":"https://avatars.githubusercontent.com/u/5222512?v=3","gravatar_id":"","url":"https://api.github.com/users/HazCod","html_url":"https://github.com/HazCod","followers_url":"https://api.github.com/users/HazCod/followers","following_url":"https://api.github.com/users/HazCod/following{/other_user}","gists_url":"https://api.github.com/users/HazCod/gists{/gist_id}","starred_url":"https://api.github.com/users/HazCod/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/HazCod/subscriptions","organizations_url":"https://api.github.com/users/HazCod/orgs","repos_url":"https://api.github.com/users/HazCod/repos","events_url":"https://api.github.com/users/HazCod/events{/privacy}","received_events_url":"https://api.github.com/users/HazCod/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2016-06-30T10:16:00Z","updated_at":"2016-07-02T15:21:41Z","closed_at":"2016-06-30T15:16:41Z","body":"#### 1. What version of Caddy are you running (`caddy -version`)?\r\nCaddy 0.8.3 (+2138270 Mon Jun 20 15:40:46 UTC 2016)\r\n\r\n#### 2. What are you trying to do?\r\nRemove Caddy and proxied 'Server' header\r\n\r\n#### 3. What is your entire Caddyfile?\r\n```text\r\nwebsite.com {\r\n    header / {\r\n        \"Strict-Transport-Security\" \"max-age=63072000; includeSubdomains; preload\"\r\n        \"X-Frame-Options\" \"DENY\"\r\n        \"X-Content-Type-Options\" \"nosniff\"\r\n        \"X-XSS-Protection\" \"1; mode=block\"\r\n        -server\r\n        -Server\r\n    }\r\n   \r\n   gzip\r\n\r\n    proxy / mgmt:8080 {\r\n        proxy_header X-Forwarded-For {host}\r\n    }\r\n}\r\n```\r\n\r\n#### 4. How did you run Caddy (give the full command and describe the execution environment)?\r\n\r\nOn docker:\r\n```\r\ncap_net_bind_service=+ep HOME=/etc/caddy /usr/sbin/caddy -conf /etc/caddy/caddyfile -email \"${EMAIL}\" -agree\r\n```\r\n\r\n#### 5. What did you expect to see?\r\nRemoved 'Server' headers.\r\n\r\n#### 6. What did you see instead (give full error messages and/or log)?\r\n'Server' headers are shown.\r\n\r\n#### 7. How can someone who is starting from scratch reproduce this behavior as minimally as possible?\r\nRun website with above caddyfile, inspect headers with 'curl --head https://website.com/`\r\n"},"comment":{"url":"https://api.github.com/repos/mholt/caddy/issues/comments/230106921","html_url":"https://github.com/mholt/caddy/issues/910#issuecomment-230106921","issue_url":"https://api.github.com/repos/mholt/caddy/issues/910","id":230106921,"user":{"login":"HazCod","id":5222512,"avatar_url":"https://avatars.githubusercontent.com/u/5222512?v=3","gravatar_id":"","url":"https://api.github.com/users/HazCod","html_url":"https://github.com/HazCod","followers_url":"https://api.github.com/users/HazCod/followers","following_url":"https://api.github.com/users/HazCod/following{/other_user}","gists_url":"https://api.github.com/users/HazCod/gists{/gist_id}","starred_url":"https://api.github.com/users/HazCod/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/HazCod/subscriptions","organizations_url":"https://api.github.com/users/HazCod/orgs","repos_url":"https://api.github.com/users/HazCod/repos","events_url":"https://api.github.com/users/HazCod/events{/privacy}","received_events_url":"https://api.github.com/users/HazCod/received_events","type":"User","site_admin":false},"created_at":"2016-07-02T15:21:41Z","updated_at":"2016-07-02T15:21:41Z","body":"I have modified the dav.datapeak.hazcod.com vhost so it has no proxy directive, but still all Server headers;\r\n\r\n```\r\ndatapeak.hazcod.com {\r\n    header / {\r\n        \"Strict-Transport-Security\" \"max-age=63072000; includeSubdomains; preload\"\r\n        \"X-Frame-Options\" \"DENY\"\r\n        \"X-Content-Type-Options\" \"nosniff\"\r\n        \"X-XSS-Protection\" \"1; mode=block\"\r\n        -server\r\n        -Server\r\n    }\r\n\r\n   gzip\r\n\r\n    proxy / mgmt:8080 {\r\n        proxy_header X-Forwarded-For {host}\r\n    }\r\n}\r\n\r\ndav.datapeak.hazcod.com {\r\n    header / {\r\n        \"Strict-Transport-Security\" \"max-age=63072000; includeSubdomains; preload\"\r\n        \"X-Frame-Options\" \"DENY\"\r\n        \"X-Content-Type-Options\" \"nosniff\"\r\n        \"X-XSS-Protection\" \"1; mode=block\"\r\n        -server\r\n        -Server\r\n    }\r\n\r\n    gzip\r\n\r\n    #proxy / dav:8080 {\r\n    #    proxy_header X-Forwarded-For {host}\r\n    #}\r\n}\r\n\r\n```"}}
{"actor":{"display_login":"HazCod"}}