I have already set up both Nginx and php.ini variables to off:
server_tokens off;
expose_php = Off
After restarting both Nginx and php-fpm services, I go ahead and open the browser's Inspect Element functionality and, as you know, you see several requests. I check everyone and I no longer see the "Nginx version" or "powered by PHP 7.x" information.
However, when I take a look at the "favicon.icon" request, both Nginx and PHP versions are shown!
What am I missing to fix it?