Skip to main content

NGINX Digest Authentication: More Secure Than Basic Auth


by Danila Vershinin, February 7, 2026

Learn how to configure NGINX digest authentication using the ngx_http_auth_digest module. This guide covers installation, htdigest password files, brute-force protection, shared memory tuning, and when to choose digest auth over basic auth for securing your NGINX locations.

Read More...

NGINX Redis2 Module: Talk to Redis Directly from NGINX


by Danila Vershinin,

Learn how to use the NGINX redis2 module to communicate with Redis directly from NGINX. This module implements the Redis 2.0 protocol with support for pipelining, keepalive connections, and all Redis commands. Install it easily on CentOS, RHEL, Rocky Linux, Debian, and Ubuntu via GetPageSpeed repository.

Read More...

NGINX Sysguard: Automatic Protection Against Server Overload


by Danila Vershinin,

Learn how to protect your NGINX server from overload using the sysguard module. Configure load-based request rejection, memory protection, and response time monitoring for graceful degradation under pressure.

Read More...

NGINX http3 http_host Is Empty — Here’s the Fix


by Danila Vershinin, February 6, 2026

NGINX HTTP/3 leaves $http_host empty, breaking FastCGI, proxy configs, and logs. nginx-mod fixed this at the protocol layer — four months before upstream shipped a partial workaround.

Read More...

NGINX Cookie Flag Module: Set HttpOnly, Secure, and SameSite


by Danila Vershinin,

Learn how to enforce HttpOnly, Secure, and SameSite cookie flags in NGINX using the cookie flag module. Step-by-step installation, configuration examples, and security best practices for protecting session cookies at the reverse proxy layer.

Read More...

NGINX JavaScript Challenge: Stop Bots Without CAPTCHAs


by Danila Vershinin,

Learn how to protect your NGINX server from bots and DDoS attacks using the JavaScript challenge module. This lightweight proof-of-work solution filters automated traffic without CAPTCHAs, preserving user experience while blocking scripts that cannot execute JavaScript.

Read More...

NGINX NAXSI WAF: Complete Setup and Configuration Guide


by Danila Vershinin,

Learn how to set up the NAXSI web application firewall for NGINX on Rocky Linux and RHEL. This guide covers installation, core rules, learning mode, whitelisting, libinjection integration, and production deployment of this lightweight WAF alternative to ModSecurity.

Read More...

NGINX FancyIndex: Beautiful Directory Listings


by Danila Vershinin, February 5, 2026

NGINX’s built-in autoindex module generates directory listings that look like they belong in the 1990s. Plain text, no styling, no sorting controls, and no way to customize the appearance. If you serve files for download — software packages, documentation, media archives, or shared project assets — you need NGINX FancyIndex. The NGINX FancyIndex module (ngx_http_fancyindex_module) […]

Read More...

NGINX LDAP Authentication: Complete Module Setup Guide


by Danila Vershinin,

Learn how to set up NGINX LDAP authentication using the nginx-auth-ldap dynamic module. This guide covers installation from pre-built packages, Active Directory integration, LDAPS encryption, multi-server failover, authentication caching, and production security hardening.

Read More...

NGINX APT Repository: 130+ Modules for Debian/Ubuntu – No More Compiling


by Danila Vershinin, February 4, 2026

If you’ve ever spent an afternoon compiling ngx_brotli on Ubuntu 22.04, only to watch it break after the next apt upgrade, this post is for you. We’re announcing the GetPageSpeed NGINX APT repository — the solution Debian and Ubuntu users have been waiting for. The state of NGINX modules on Debian and Ubuntu has become… […]

Read More...