{"id":18338948,"url":"https://github.com/marverix/nginx-conf","last_synced_at":"2025-04-09T20:36:15.316Z","repository":{"id":97408066,"uuid":"354495933","full_name":"marverix/nginx-conf","owner":"marverix","description":"Security-focused Nginx Configuration based on OWASP recommendations","archived":false,"fork":false,"pushed_at":"2021-04-05T08:03:22.000Z","size":8,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-02-15T12:47:03.858Z","etag":null,"topics":["nginx","nginx-configuration","owasp","security"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/marverix.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-04-04T08:44:10.000Z","updated_at":"2021-04-05T08:03:24.000Z","dependencies_parsed_at":"2023-03-04T05:45:28.470Z","dependency_job_id":null,"html_url":"https://github.com/marverix/nginx-conf","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/marverix%2Fnginx-conf","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/marverix%2Fnginx-conf/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/marverix%2Fnginx-conf/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/marverix%2Fnginx-conf/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/marverix","download_url":"https://codeload.github.com/marverix/nginx-conf/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248108533,"owners_count":21049148,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["nginx","nginx-configuration","owasp","security"],"created_at":"2024-11-05T20:16:02.177Z","updated_at":"2025-04-09T20:36:15.294Z","avatar_url":"https://github.com/marverix.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Nginx Configuration\n\nSecurity-focused Nginx Configuration based on OWASP recommendations \n\n## Sources\n\n* [OWASP Application Security Verification Standard 4.0.2](https://raw.githubusercontent.com/OWASP/ASVS/master/4.0/OWASP%20Application%20Security%20Verification%20Standard%204.0.2-en.pdf)\n* [OWASP Transport Layer Protection Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Protection_Cheat_Sheet.html)\n* [Mozilla MDN Web Docs - HTTP Headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers)\n* [Mozilla Web Security Cheat Sheet](https://infosec.mozilla.org/guidelines/web_security)\n* [Mozilla SSL Configuration Generator](https://ssl-config.mozilla.org/)\n* [Nginx Documentation](https://nginx.org/en/docs/)\n\n## Usage\n\n### nginx.conf\n\nEach version is tagged, so you can basicly do something like this:\n\n```sh\ncurl https://raw.githubusercontent.com/marverix/nginx-conf/TAG_HERE/nginx.conf \u003e /etc/nginx/nginx.conf\n```\n\nExample for `v3`:\n\n```sh\ncurl https://raw.githubusercontent.com/marverix/nginx-conf/v3/nginx.conf \u003e /etc/nginx/nginx.conf\n```\n\nOr if you want always the latest version, use tag `latest`:\n\n```sh\ncurl https://raw.githubusercontent.com/marverix/nginx-conf/latest/nginx.conf \u003e /etc/nginx/nginx.conf\n```\n\n### mysite.conf\n\nThe same situation here:\n\n```sh\ncurl https://raw.githubusercontent.com/marverix/nginx-conf/latest/mysite.conf \u003e /etc/nginx/sites-available/your-site-name\n```\n\nThen enable:\n\n```sh\nln -s /etc/nginx/sites-available/your-site-name /etc/nginx/sites-enabled/your-site-name\n```\n\n## License\n\nRepo is under [ISC License](https://tldrlegal.com/license/-isc-license), so \"basically, you can do whatever you want as long as you include the original copyright\".\n\nI didn't want to force anyone to share your patches, however I would be really grateful if you could help me co-create this config and share your improvements.\n\nThank you!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmarverix%2Fnginx-conf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmarverix%2Fnginx-conf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmarverix%2Fnginx-conf/lists"}