Skip to main content

NGINX Encrypted Session Module: AES-256 Variable Encryption


by Danila Vershinin, March 5, 2026

Learn how to encrypt and decrypt NGINX variable values using the encrypted session module. This guide covers AES-256-CBC encryption for secure cookies, time-limited tokens, and session management directly in NGINX configuration.

Read More...

NGINX WebDAV Module: Full File Sharing Server Setup


by Danila Vershinin, March 3, 2026

Learn how to build a full-featured WebDAV file server with NGINX using the dav-ext module. This guide covers installation, PROPFIND, OPTIONS, LOCK, and UNLOCK configuration, SELinux setup, and security hardening for production deployments.

Read More...

NGINX AWS S3 Proxy: Secure Module Guide


by Danila Vershinin, February 26, 2026

Learn how to use the NGINX AWS auth module to securely proxy requests to Amazon S3 without exposing IAM secret keys on your server. This guide covers installation, configuration, signing key rotation, and security best practices for the ngx_aws_auth module.

Read More...

NGINX Auth Hash Module: Secure URL Authentication


by Danila Vershinin,

Learn how to protect files and content with the NGINX auth hash module. This module brings SHA-256, SHA-512, BLAKE2, and other modern hash algorithms to NGINX secure URL authentication, replacing the MD5-only limitation of the built-in secure_link module.

Read More...

NGINX Reverse Proxy Ollama: Host Your Own Free LLM


by Danila Vershinin, February 25, 2026

Run your own ChatGPT alternative for free with Ollama or vLLM behind NGINX. This guide covers streaming-safe proxy configuration, authentication, rate limiting, and SELinux fixes for RHEL — all tested with real inference.

Read More...

NGINX Access Control Module: Variable-Based Rules


by Danila Vershinin,

The NGINX access control module extends native allow/deny directives beyond IP addresses to any NGINX variable. Build flexible access policies using headers, query parameters, geo data, and custom maps — all evaluated at the access phase without resorting to if-statements.

Read More...

NGINX PAM Authentication: System Users and LDAP Integration


by Danila Vershinin, February 20, 2026

Configure NGINX PAM authentication to authenticate users against Linux system accounts, LDAP directories, and Active Directory. Includes installation, configuration examples, caching for performance, and security best practices.

Read More...

NGINX PTA Module: Time-Limited Token Authentication


by Danila Vershinin, February 16, 2026

Learn how to protect NGINX content with time-limited encrypted tokens using the PTA (Period of Time Authentication) module. Prevent hotlinking and enable secure, expiring download links with AES-128 encryption.

Read More...

Phantom Token NGINX Module: Secure API Gateway Auth


by Danila Vershinin, February 10, 2026

Learn how to implement the Phantom Token pattern in NGINX to secure your APIs. This module exchanges opaque access tokens for JWTs at the gateway level, protecting sensitive claims from client applications while working with any RFC 7662-compliant OAuth provider.

Read More...

NGINX Digest Authentication: More Secure Than Basic Auth


by Danila Vershinin, February 7, 2026

Learn how to configure NGINX digest authentication using the ngx_http_auth_digest module. This guide covers installation, htdigest password files, brute-force protection, shared memory tuning, and when to choose digest auth over basic auth for securing your NGINX locations.

Read More...