Restoring Real Visitor IPs with Cloudflare and Nginx
Configure Nginx to restore real visitor IPs behind Cloudflare — correct access logs, rate limiting, and IP-based access control with the ngx_http_realip_module.
Installing WordPress 6.9.4 on Nginx
A production-ready Nginx configuration for WordPress 6.9.4 — security blocks, static caching, Cloudflare real-IP, rate limiting, and wp-config.php essentials tuned for performance.
Serving Static Sites with Nginx
Nginx is at its fastest when there's no backend to talk to. A complete guide to serving static sites — clean URLs, pre-compressed assets, aggressive caching, and security headers you can actually lock down.
Hardening SSH on Linux
A practical guide to locking down SSH access: Ed25519 keys, sshd_config hardening, fail2ban, port changing, and key management for single-admin servers.
Securing Nginx and PHP
A practical guide to hardening Nginx and PHP-FPM on a single-admin server: user separation, SSH key authentication, connection limits, rate limiting, and PHP configuration defaults that won't get you compromised.
Installing Bludit 3.21.1 on Nginx
A production-ready Nginx configuration for the flat-file Bludit CMS — directory protection, static caching, PHP-FPM tuning, and Cloudflare compatibility.