If you're using #Caddy with #Jenkins, here's a way to make that a little less obvious to script kiddies:
route /* {
reverse_proxy localhost:8080 {
@unauthed status 401 403
handle_response @unauthed {
header -x-jenkins
header -x-jenkins-session
header -x-hudson
copy_response
}
}
}
#caddyserver