Rate Limiting with Nginx's limit_req

Use Nginx's limit_req module to protect your site from HTTP floods and brute-force attacks — with real-world examples for static pages, PHP handlers, and login endpoints.

Protecting Folders with Nginx

Basic authentication in Nginx is a quick way to gate a directory, an admin area, or an entire staging site behind a username and password. It's not a replacement for a full login system, but for internal tools, dev environments, or adding a second layer in front of something already protected, it does the job with almost no overhead.

Nginx ssl_stapling ignored With LetsEncrypt Certbot (2025)

If you are seeing this error this month (May 2025) and have tried searching the web for a fix you will find that there will be no fix that keeps SSL Stapling enabled. LetsEncrypt no longer includes OCSP URLs. Here's how to update your configuration.

GeoIPLookup: Geolocation from the CLI

If you have your own server or use a Linux/BSD desktop at home there's little reason why you can't just quickly do a GeoIP lookup from the command line. Here's how to install it on Debian, Ubuntu, CentOS and FreeBSD along with a trick or two.

Nginx Configuration Examples

Here are a number of Nginx configurations for common scenarios that should help make things easier to get started with. This page will grow as needed. Includes some sample configurations for Wordpress, Wordpress + W3TC, Drupal and NibbleBlog.