Security & TLS
Harden a public server through documented defensive controls and state what each control changes. Version, provider, network path, and existing access method can change the safe sequence. Protect current access before changing firewall or SSH rules, verify from a separate session, and isolate any destructive command behind a clear warning and recovery plan.
Nginx Hardening Checklist for Production Servers
Nginx hardening starts with the effective configuration, not a generic snippet.
How to Secure Nginx with Let's Encrypt (Certbot Tutorial)
To secure Nginx with Let's Encrypt, install Certbot (sudo snap install --classic certbot on Ubuntu), then run sudo certbot --nginx -d yourdomain.com.
UFW Firewall Setup for Nginx on Ubuntu: 5 Essential Rules
To set up a UFW firewall for Nginx on Ubuntu, run five commands: sudo ufw default deny incoming, sudo ufw default allow outgoing, sudo ufw allow OpenSSH,…