Tag: hardening

Installing WordPress 7.0 on Nginx

A production-ready Nginx configuration for WordPress 6.9.4 — security blocks, static caching, Cloudflare real-IP, rate limiting, and wp-config.php essentials tuned for performance.

Hardening SSH on Linux

A practical guide to locking down SSH access: Ed25519 keys, sshd_config hardening, fail2ban, port changing, and key management for single-admin servers.

Securing Nginx and PHP

A practical guide to hardening Nginx and PHP-FPM on a single-admin server: user separation, SSH key authentication, connection limits, rate limiting, and PHP configuration defaults that won't get you compromised.

Rate Limiting with Nginx's limit_req

Use Nginx's limit_req module to protect your site from HTTP floods and brute-force attacks — with real-world examples for static pages, PHP handlers, and login endpoints.

Protecting Folders with Nginx

Basic authentication in Nginx is a quick way to gate a directory, an admin area, or an entire staging site behind a username and password. It's not a replacement for a full login system, but for internal tools, dev environments, or adding a second layer in front of something already protected, it does the job with almost no overhead.