Skip to main content

NGINX HSTS: Complete Strict-Transport-Security Guide


by Danila Vershinin, August 5, 2018

Learn how to configure NGINX HSTS (Strict-Transport-Security) correctly. This comprehensive guide covers the RFC 6797 specification, preload requirements, redirect patterns for www and non-www domains, common misconfigurations, and how to avoid SSL stripping attacks with verified configurations.

Read More...

Modern approaches to secure websites in 2018


by Danila Vershinin, August 3, 2018

Some of the things you really want to take care about to secure your website.

Read More...

Magento 2 Security Checklist


by Danila Vershinin, June 24, 2018

When you prepare to launch your Magento 2 website, security is one of the primary areas of concern. Whether you plan to accept credit card data directly on your website, or on a payment provider’s pages – you are required to achieve PCI compliance. Otherwise, you’ll find your business at risk of being banned from […]

Read More...

How to Remove the Server Header in NGINX


by Danila Vershinin,

How to hide the Server HTTP header in NGINX and more: hide the fact of using NGINX altogether.

Read More...

Html.Exploit.CVE_2017_11793-6336854-1 FOUND. What is it?


by Danila Vershinin, October 14, 2017

Find out how to deal with Html.Exploit.CVE_2017_11793-6336854-1 and if you are affected

Read More...

Stop Google Analytics SPAM bots and reduce server load


by Danila Vershinin, September 17, 2017

Reduce server load easily by configuring nginx to discard unknown hostnames. Fight those Google Analytics spam bots!

Read More...

NGINX SELinux: Fix Permission Denied, 502, and Port Errors


by Danila Vershinin, August 7, 2017

Fix every common NGINX SELinux error: 502 bad gateway from proxy_pass, 403 forbidden on static files, port binding failures, and more. Complete boolean reference table, file context guide, and 11 real-world scenarios with verified one-liner fixes for RHEL, Rocky Linux, and AlmaLinux.

Read More...

Varnish as Web Application Firewall


by Danila Vershinin, May 16, 2017

Protect your web application using.. simple Varnish VCL coding.

Read More...

Protect Magento 1.x admin in Nginx setup


by Danila Vershinin, March 19, 2017

Protect Magento 1.x administrator interface and Wordpress administrator interface to fight hackers trying to steal credit card data

Read More...

Vulnerability in the Linux kernel’s TCP stack implementation


by Danila Vershinin, August 12, 2016

Announcement of discovered vulnerability in the Linux kernel’s TCP stack implementation

Read More...