Skip to main content

Install ModSecurity NGINX: Complete WAF Guide


by Danila Vershinin, February 19, 2026

Complete guide to installing ModSecurity WAF with NGINX. Learn how to protect your web applications from SQL injection, XSS, and OWASP Top 10 vulnerabilities using pre-configured packages with OWASP Core Rule Set.

Read More...

AI VPS Setup Made Shared Hosting Obsolete


by Danila Vershinin, February 18, 2026

Shared hosting is a relic from an era when server administration required expertise. In 2026, AI VPS setup has made those training wheels completely unnecessary. I’ve written before about why cPanel is terrible and why DirectAdmin is disgusting. My advice was always the same: get a VPS from Linode, learn some Linux, set it up […]

Read More...

The Jetpack Cache Problem: How It Destroys Your CDN


by Danila Vershinin,

Every WordPress site running Jetpack is silently hemorrhaging cache efficiency. Your CDN, your Varnish, your edge cache — all of them are storing duplicate entries for the same content, serving cache misses where there should be hits. The culprit? A single line of PHP that violates HTTP standards and was never caught by Automattic’s code […]

Read More...

NGINX SXG Module: Signed HTTP Exchanges Guide


by Danila Vershinin,

Enable Google Search prefetching with the NGINX SXG module. This guide covers installation, configuration, and testing of Signed HTTP Exchanges for instant page loads and improved Core Web Vitals.

Read More...

NGINX Query String Normalization with sorted-args Module


by Danila Vershinin, February 17, 2026

Improve NGINX cache hit rates by normalizing query string parameter order. The sorted-args module eliminates cache fragmentation caused by tracking codes, parameter reordering, and cache-busting parameters.

Read More...

NGINX Tuning Module: Data-Driven Buffer Optimization


by Danila Vershinin, February 16, 2026

Stop guessing your NGINX buffer sizes and timeouts. The Tuning Advisor module collects real-time metrics from your production traffic and provides actionable configuration recommendations based on actual data—not assumptions.

Read More...

NGINX PTA Module: Time-Limited Token Authentication


by Danila Vershinin,

Learn how to protect NGINX content with time-limited encrypted tokens using the PTA (Period of Time Authentication) module. Prevent hotlinking and enable secure, expiring download links with AES-128 encryption.

Read More...

NGINX Device Detection Module: Block AI Crawlers


by Danila Vershinin, February 15, 2026

The NGINX Device Detection Module (ngx_http_device_type_module) performs high-performance device classification directly at the edge. It identifies mobile phones, tablets, desktops, gaming consoles, smart TVs, wearables, and bots—including AI crawlers like GPTBot and ClaudeBot. Traditional device detection solutions rely on external API calls. This adds latency and per-request costs. The NGINX device detection module performs detection […]

Read More...

NGINX Markdown Module: Serve Docs from .md Files


by Danila Vershinin,

Transform Markdown files into HTML pages on-the-fly with the NGINX Markdown module. Eliminate build steps, enable YAML front matter for SEO, and serve documentation sites directly from .md files with GitHub Flavored Markdown support.

Read More...

NGINX Honeypot 3.0: Advanced IP Blocking with nftables


by Danila Vershinin,

NGINX Honeypot 3.0 introduces the ngx_nftset_access module – a complete rewrite using modern nftables instead of legacy ipset. Auto-ban attackers, rate-limit abusers, and challenge bots with proof-of-work puzzles, all from within NGINX.

Read More...