[...] server_tokens off; [...]