How to hide Server header in any response from Chef server 12.x

My IT security department wants me to hide server type and version in my Chef 12 server which is exposed to the Inet. Currently it’s returning: “Server: openresty/” for any request. I tried “server_tokens off;” but it didn’t work for ‘openresty’.