Tutorials

DockerLinuxNginxSecurityNetworkingSelf-hostingWeb ServerReverse ProxyVPSDebianUbuntuFirewallVirtual HostsBGPRPKIBIRD2FRRoutingVyOSAnycastSSHFail2Bann8nDocker ComposePostgreSQLWorkflow AutomationSSLTLSLet's EncryptCertbotHTTPStmuxTerminalVPS AdministrationClaude CodeAI ToolsRIPE NCCUFWiptablesGNU ScreenTerminal MultiplexerScreen SessionWebhooksSelf-Hostedproxy_passWebSocketOllamaAI AgentsMCPsshd_configEd25519Rootless DockerSeccompAppArmorContainersOpenClawHermes AgentRoutingIPv6systemdFRRTypeScriptNode.jsROARoutinatorAI AgentTelegramVimText EditorServer AdministrationAIOpsObservabilityMonitoringSigNozGrafanaLangfusePrometheusIP TransitProductionLoggingDisk ManagementOpenObserveOpenTelemetryDatadog AlternativeGDPRnftablesLokiPromtailLogQLClaudeAI WorkflowsLangChainBackupMySQLS3RcloneCronPythonLog AnalysisDiscordSlackDisaster RecoveryTraefikCaddyWireGuardTailscaleVPNHeadscaleAlertmanagerSelf-HealingPerformanceZero DowntimeGitHub ActionsAI Code ReviewGeminiCI/CDRate LimitingDDoS ProtectionBIND9DNSHigh AvailabilityPrivacyVaultwardenPassword ManagerBGPalerterPlakarEncryptionDeduplicationImmichPhoto ManagementGoogle Photos AlternativeReplicationOffsite BackupPaperless-ngxDocument ManagementOCRGiteaGitPlausibleAnalyticsClickHouseUptime KumaBeszelHardeningFailoverMultihomingBFDLLM ObservabilityDeepEvalWindows ServerVeeamMigrationBare Metal RestoreVirtIOP2V
Tutorial
DebianNginxUbuntu

Nginx Security Hardening on Ubuntu and Debian

Harden Nginx beyond its defaults with security headers, TLS 1.3, HSTS, method restrictions, and access controls. Each directive is tied to the specific attack it prevents.

11 min readRead →