Secure Nginx

Nginx 設定

隱藏 nginx 版本資訊

http {          
    ##         
    # Basic Settings         
    ##         
    server_tokens off; 
...

設定白名單存取

vi /etc/nginx/conf.d/whiteListIP.conf

allow 192.168.1.1;
allow 192.168.1.2;
allow 192.168.2.0/24;
deny all; 

With fail2ban

https://easyengine.io/tutorials/nginx/fail2ban/

參考連結

• https://www.cyberciti.biz/tips/linux...-security.html
• https://www.digitalocean.com/communi...n-ubuntu-14-04
• Limiting Access to Proxied HTTP Resources
• Nginx Block And Deny IP Address OR Network Subnets