NGiNX - Revision history

Goldbolt: /* NGiNX Security */

2020-03-12T19:31:33Z

‎NGiNX Security

2020-03-12T19:31:19Z

‎NGiNX Security

2020-03-07T15:13:23Z

2019-09-12T14:58:28Z

2019-01-02T22:09:01Z

2019-01-02T19:58:33Z

‎NGiNX Security

2019-01-02T19:58:22Z

‎NGiNX Security

2019-01-02T19:57:03Z

‎NGiNX Security

2019-01-02T19:41:08Z

2019-01-02T19:32:57Z

@@ Line 111: / Line 111: @@
                  ssl_protocols TLSv1.2; #TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
          	#ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
-         	#ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256';
+         	ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256';
          	ssl_dhparam /home/USER/dhparams.pem;
                  ssl_prefer_server_ciphers on;

@@ Line 110: / Line 110: @@
                  ssl_protocols TLSv1.2; #TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
-         	ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
+         	#ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
          	ssl_dhparam /home/USER/dhparams.pem;
                  ssl_prefer_server_ciphers on;

← Older revision		Revision as of 15:13, 7 March 2020
Line 1:		Line 1:
		+	[[File:NGINX logo.png\|thumb]]
	<strong>NGiNX</strong>		<strong>NGiNX</strong>
	Nginx ( /ˌɛndʒɪnˈɛks/ EN-jin-EKS) (stylized as NGiNX or nginx) is a web server which can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. The software was created by Igor Sysoev and first publicly released in 2004. A company of the same name was founded in 2011 to provide support and Nginx plus paid software.		Nginx ( /ˌɛndʒɪnˈɛks/ EN-jin-EKS) (stylized as NGiNX or nginx) is a web server which can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. The software was created by Igor Sysoev and first publicly released in 2004. A company of the same name was founded in 2011 to provide support and Nginx plus paid software.

@@ Line 1: / Line 1: @@
 <strong>NGiNX</strong>
-Nginx ( /ˌɛndʒɪnˈɛks/ EN-jin-EKS[8]) (stylized as NGiNX or nginx) is a web server which can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. The software was created by Igor Sysoev and first publicly released in 2004. A company of the same name was founded in 2011 to provide support and Nginx plus paid software.
+Nginx ( /ˌɛndʒɪnˈɛks/ EN-jin-EKS) (stylized as NGiNX or nginx) is a web server which can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. The software was created by Igor Sysoev and first publicly released in 2004. A company of the same name was founded in 2011 to provide support and Nginx plus paid software.
 Nginx is free and open-source software, released under the terms of a BSD-like license. A large fraction of web servers use NGINX, often as a load balancer.

← Older revision		Revision as of 22:09, 2 January 2019
Line 166:		Line 166:
	text/javascript		text/javascript
	application/x-javascript;		application/x-javascript;
		+
		+	=Header=
		+	This setting reports what the server OS or software is being used. This can be set to anything to throw others off the trail for additional security.
		+
		+	add_header Server "FreeBSD";

@@ Line 87: / Line 87: @@
 =NGiNX Security=
 In order to better secure your server, use the following within each virtual host but be aware these may break compatibility with certain websites:
 <code>
 		ssl_ecdh_curve secp384r1;

@@ Line 87: / Line 87: @@
 =NGiNX Security=
 In order to better secure your server, use the following within each virtual host but be aware these may break compatibility with certain websites:
 	        ssl_session_tickets off;
 	        add_header X-XSS-Protection "1; mode=block";
 	        add_header Expect-CT "max-age=0";
 		add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
 		add_header X-Frame-Options SAMEORIGIN;
 		add_header X-Content-Type-Options nosniff;
 		add_header X-XSS-Protection "1; mode=block";
 These can be added to the nginx.conf file to help secure even more:

← Older revision		Revision as of 19:41, 2 January 2019
Line 113:		Line 113:
	add_header X-XSS-Protection "1; mode=block";		add_header X-XSS-Protection "1; mode=block";
	add_header Expect-CT "max-age=0";		add_header Expect-CT "max-age=0";
		+
		+	=NGiNX & gzip=
		+	Throw this into the nginx.conf to enable gzip:
		+
		+	gzip on;
		+	gzip_disable "msie6";
		+	gzip_vary on;
		+	gzip_proxied any;
		+	gzip_comp_level 5;
		+	gzip_buffers 16 8k;
		+	gzip_min_length 256;
		+	gzip_http_version 1.1;
		+	gzip_types
		+	application/atom+xml
		+	application/javascript
		+	application/json
		+	application/ld+json
		+	application/manifest+json
		+	application/rss+xml
		+	application/vnd.geo+json
		+	application/vnd.ms-fontobject
		+	application/x-font-ttf
		+	application/x-web-app-manifest+json
		+	application/xhtml+xml
		+	application/xml
		+	font/opentype
		+	image/bmp
		+	image/png
		+	image/jpg
		+	image/jpeg
		+	image/svg+xml
		+	image/x-icon
		+	text/cache-manifest
		+	text/css
		+	text/plain
		+	text/vcard
		+	text/vnd.rim.location.xloc
		+	text/vtt
		+	text/x-component
		+	text/x-cross-domain-policy
		+	text/js
		+	text/xml
		+	text/javascript
		+	application/x-javascript;

@@ Line 3: / Line 3: @@
 Nginx is free and open-source software, released under the terms of a BSD-like license. A large fraction of web servers use NGINX, often as a load balancer.
 =Proxy Forwarding=
@@ Line 69: / Line 84: @@
           auth_basic "Restricted Content";
           auth_basic_user_file /home/username/.htpasswd;