Skip to main content

NGINX Bot Protection Without CAPTCHA: Testcookie Guide


by Danila Vershinin, January 30, 2026

Learn how to implement NGINX bot protection using the testcookie module. This JavaScript-based challenge blocks automated traffic without frustrating legitimate users with CAPTCHAs.

Read More...

NGINX Secure Link: Signed URLs and Hotlink Protection


by Danila Vershinin, January 29, 2026

Learn how to implement NGINX secure link functionality for signed URLs and hotlink protection. This comprehensive guide covers the HMAC Secure Link module installation, configuration, and client-side token generation in PHP, Python, and Bash.

Read More...

NGINX Sticky Sessions: Cookie-Based Load Balancing


by Danila Vershinin,

Learn how to implement NGINX sticky sessions with cookie-based load balancing. This comprehensive guide covers installation, configuration, security best practices, and troubleshooting for Rocky Linux, AlmaLinux, and RHEL systems.

Read More...

Headers More NGINX Rocky Linux 10: Header Control


by Danila Vershinin, January 28, 2026

Install the Headers More module for NGINX on Rocky Linux 10 and AlmaLinux 10. Complete guide covering security header hardening, server fingerprint removal, and advanced header manipulation patterns.

Read More...

ModSecurity NGINX Rocky Linux 10: WAF Setup


by Danila Vershinin,

Install ModSecurity WAF for NGINX on Rocky Linux 10 and AlmaLinux 10. Complete guide covering installation, OWASP Core Rule Set configuration, rule tuning, and production-ready WAF setup with SELinux support.

Read More...

NGINX map Directive: Guide to Conditional Variables


by Danila Vershinin, January 27, 2026

Learn how to use the NGINX map directive to create conditional variables for routing, rate limiting, security headers, and A/B testing. This comprehensive guide covers syntax, pattern matching, real-world examples, and performance optimization.

Read More...

NGINX If Is Evil: Complete Guide to Safe Conditional Logic


by Danila Vershinin,

The NGINX if directive has earned a notorious reputation. Learn why “if is evil” in NGINX, which directives are safe inside if blocks, and how to write robust conditional logic using map directives and other alternatives.

Read More...

NGINX Virtual Host: Host Multiple Domains on One Server


by Danila Vershinin,

Learn how to configure NGINX virtual hosts (server blocks) to host multiple domains on one server. This guide covers basic setup, wildcard subdomains, server_name matching, default_server configuration, and SELinux considerations for Rocky Linux and RHEL systems.

Read More...

NGINX Allow Deny: Complete IP Whitelist & Blacklist Guide


by Danila Vershinin,

Master NGINX allow and deny directives to control access by IP address. This complete guide covers IP whitelisting, blacklisting, CIDR notation, the geo module for large IP lists, and common pitfalls with tested configurations.

Read More...

NGINX Basic Auth with htpasswd: Complete Configuration Guide


by Danila Vershinin, January 26, 2026

Learn how to configure NGINX basic authentication using htpasswd. This complete guide covers password file creation, hash algorithms, WordPress protection, staging site security, SSL integration, and troubleshooting.

Read More...