Nginx中headers-more-nginx-module头信息管理进阶指南

more_set_headers 'Server: my-server';
more_set_headers 'X-Custom-Header: custom-value';

# 仅在404状态码且内容类型为text/html时设置头信息
more_set_headers -s 404 -t 'text/html' 'X-Error: Page Not Found';

location /api {
    more_set_input_headers 'User-Agent: Custom-Agent' 'X-API-Key: secret-key';
}

# 全局设置服务器标识
more_set_headers 'Server: My-Web-Server';

# 特定路径使用不同标识
location /admin {
    more_set_headers 'Server: Admin-Server';
}

location / {
    more_set_headers 'X-Content-Type-Options: nosniff';
    more_set_headers 'X-Frame-Options: SAMEORIGIN';
    more_set_headers 'X-XSS-Protection: 1; mode=block';
}

location ~ ^/api/v(\d+) {
    more_set_headers "X-API-Version: v$1";
}

wget http://nginx.org/download/nginx-1.21.3.tar.gz
tar zxvf nginx-1.21.3.tar.gz
cd nginx-1.21.3

git clone https://gitcode.com/gh_mirrors/he/headers-more-nginx-module

./configure --add-module=/path/to/headers-more-nginx-module
make
make install

load_module modules/ngx_http_headers_more_filter_module.so;

# 清除所有以X-Hidden-开头的头信息
more_clear_headers 'X-Hidden-*';

set $environment "production";
more_set_headers "X-Environment: $environment";

# 仅当X-Foo头信息存在时才替换
more_set_input_headers -r 'X-Foo: new-value';