The following Nginx SSL configuration gives me PCI compliance as well as protection against BEAST attacks. This configuration also ensures that forward secrecy is applied in the SSL layer. More information on forward secrecy here. So this is what my typical few lines of SSL configuration would look like in Nginx vhost: server { listen […]
Ubuntu doesn’t always keep up with the latest stable releases of Nginx. To install latest Nginx on Ubuntu I normally follow these steps: Step 1 Add latest stable release distro to Ubuntu sources file in /etc/apt/sources.list. Replace ‘precise’ with your Ubuntu version: echo 'deb http://nginx.org/packages/ubuntu/ precise nginx' >> /etc/apt/sources.list Step 2 Add public key from […]
Every time I want to generate Nginx htpasswd I forget how to do it. This is just for my reference so I don’t have to search for a solution on the Internet. Apache comes with htpasswd utility, but I strictly run Nginx these days and don’t really need Apache or any Apache related utilities on […]
I’ve been working with Nginx web server for a while now. I have to say it’s an impressive web server that performs really well on high traffic websites. I’m in the process of migrating all my sites from Apache to Nginx. I am about 80% there after migrating WordPress and Joomla sites to Nginx without […]