Nginx
Nginx hardening profile
Harden the nginx configuration with the help of systemd sandboxing capabilities and restricting resources.
Hardening nginx with systemd security features
Secure your nginx service by using security features provided by systemd.
Adding the Expires header to improve caching static content in nginx
Want to improve caching on your nginx web server? Learn how to set the Expires header and enhance your nginx configuration.
Nginx security hardening guide
Learn how to secure your nginx configuration with this hardening guide. It includes examples and tips to implement security measures step by step.
How to see all virtual hosts in nginx
Want to see all configured virtual hosts on a server running nginx? Here is a method to achieve this quickly by using a default configuration option.
How to log only some requests to a log file in nginx
Nginx is flexible when it comes to what should be logged in the access.log. With the combination of a map and if-statement, this can be achieved very easily!
Pre-compress static assets with Brotli and Gzip
Let's make the web a smaller place by pre-compressing static assets with Brotli and Gzip. Here are some useful tips to get started.
How to block POST requests in nginx
Want to block all HTTP POST requests in nginx? There are multiple ways to achieve this and within this article we look at the best fit.
How the web changes with HTTP/2: Performance and Security
The web changes and so does one of the most important underlying protocols HTTP. Learn about HTTP/2 and what it means for performance and security.
Optimize SSL/TLS for Maximum Security and Speed
Everyone loves secure websites, as long as they are quick. Let's configure our website for maximum security and performance, at the same time.
Securing nginx configurations: implementing OCSP stapling
OCSP stapling is a logical follow-up on Online Certificate Status Protocol. With newer versions of Nginx we can enable OCSP stapling and enable testing.
Protect against the BEAST attack in Nginx
The BEAST attack showed up in 2011 and some servers are still vulnerable to it. With the right protocols, ciphers and preference, we can keep the BEAST out.
Configure HSTS (HTTP Strict Transport Security) for Apache and Nginx
HTTP Strict Transport Security (HSTS) is a security capability to force clients to use HTTPS. In this article, we implement HSTS for Apache and Nginx.
Hiding the nginx version number
Security professionals usually don't advise to use security through obscurity. Still, it's wise to hide the nginx version number.