Security & TLS
A public web server is scanned by bots within minutes of going online, so security is not an optional appendix — it is part of setup. This collection covers TLS certificates with Let's Encrypt, firewall rules with ufw, SSH hardening, and the permissions hygiene that keeps a compromise contained. Security guides here are deliberately conservative: we recommend the well-trodden path (Certbot, ufw, key-based SSH) over clever exotic setups, we explain what each hardening step actually defends against, and we say plainly when a step is precautionary rather than critical.
How to Secure Nginx with Let's Encrypt (Certbot Tutorial)
To secure Nginx with Let's Encrypt, install Certbot (sudo snap install --classic certbot on Ubuntu), then run sudo certbot --nginx -d yourdomain.com.
UFW Firewall Setup for Nginx on Ubuntu: 5 Essential Rules
To set up a UFW firewall for Nginx on Ubuntu, run five commands: sudo ufw default deny incoming, sudo ufw default allow outgoing, sudo ufw allow OpenSSH,…