https://github.com/stylersnico/nginx-secure-config
Nginx configuration file for optimized security and performance
https://github.com/stylersnico/nginx-secure-config
Last synced: about 1 month ago
JSON representation
Nginx configuration file for optimized security and performance
- Host: GitHub
- URL: https://github.com/stylersnico/nginx-secure-config
- Owner: stylersnico
- License: mit
- Created: 2016-08-26T08:44:53.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2022-08-17T12:27:31.000Z (over 2 years ago)
- Last Synced: 2024-10-31T03:35:31.409Z (6 months ago)
- Homepage: https://www.nicolas-simond.ch/
- Size: 49.8 KB
- Stars: 71
- Watchers: 6
- Forks: 16
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - stylersnico/nginx-secure-config - Nginx configuration file for optimized security and performance (Others)
README
# Secure Configuration for NGINX
The goal of this project is to provide the most secure and supported nginx.conf file with support for very latest improvements like:
* HTTP2 with ALPN
* Threads AIO
* CHACHA20_POLY1305
* x25519 support
* TLS 1.3 support
* Multiple ssl_ecdh_curve support
* 0-RTT support for TLS 1.3
* Crowdsec NGINX bouncer (Don't forget to uncomment the line at the beginning for LUA support)
* And much more ...
Results :
* A+ on SSL Labs
* A on Security Headers (.io)
If you want to use a NGINX release that support every of this, you need to use the package **nginx-extras** on Debian 11 that support every feature listed here.
--------
> :warning: **If you were using custom Nginx and want to go back to nginx-extras package**: Like this one: https://github.com/stylersnico/nginx-openssl-chacha-naxsi
```bash
#stop nginx
systemctl stop nginx
#clean old stuff
rm -rf /usr/local/etc/nginx/
rm /usr/sbin/nginx
rm /etc/nginx/naxsi_core.rules
rm /etc/init.d/nginx && rm /etc/init.d/nginx-debug
rm /lib/systemd/system/nginx.service
#Install Nginx-extras and overwrite all configs
apt -o Dpkg::Options::="--force-confnew" install nginx-extras -y
#Grab latest nginx.conf file and restart
cd /etc/nginx/
rm nginx.conf && wget https://raw.githubusercontent.com/stylersnico/nginx-secure-config/master/nginx.conf
systemctl restart nginx
```