Install Nginx on AlmaLinux 9

Step 1 – Update and enable EPEL

dnf update -y
dnf install epel-release -y

Step 2 – Install Nginx

dnf install -y nginx

Step 3 – Enable and start

systemctl enable --now nginx

Step 4 – Firewall

firewall-cmd --permanent --add-service=http
firewall-cmd --perma...

Install Nginx on RHEL 9

Step 1 – Update and enable EPEL

dnf update -y
subscription-manager repos --enable codeready-builder-for-rhel-9-$(arch)-rpms

Step 2 – Install Nginx

dnf install -y nginx

Step 3 – Enable and start

systemctl enable --now nginx

Step 4 – Firewall

firewall-cmd --perm...

Install Nginx on Ubuntu 24.04

Step 1 – Update packages

apt update && apt upgrade -y

Step 2 – Install Nginx

apt install -y nginx

Step 3 – Enable and start

systemctl enable --now nginx

Step 4 – Firewall

ufw allow 'Nginx Full'
ufw reload

Step 5 – Verify

nginx -v
curl -I http://local...

Install Nginx on Debian 12

Step 1 – Update packages

apt update && apt upgrade -y

Step 2 – Install Nginx

apt install -y nginx

Step 3 – Enable and start

systemctl enable --now nginx

Step 4 – Firewall

ufw allow 'Nginx Full'
ufw reload

Step 5 – Verify

nginx -v
curl -I http://localhos...

Install Nginx on Gentoo Linux

Step 1 – Sync Portage

emerge --sync

Step 2 – Set USE flags

Create /etc/portage/package.use/nginx:

www-servers/nginx http http-cache http2 pcre ssl

Step 3 – Install

emerge --ask www-servers/nginx

Step 4 – Enable (OpenRC)

rc-update add nginx default
rc...

Install Nginx on Arch Linux

Step 1 – Update

pacman -Syu --noconfirm

Step 2 – Install

pacman -S --noconfirm nginx

Step 3 – Enable and start

systemctl enable --now nginx

Step 4 – Firewall

ufw allow 80/tcp && ufw allow 443/tcp && ufw reload

Step 5 – Verify

nginx -v && curl -I http:/...

Install Nginx on OpenBSD 7.5

Step 1 – Install

pkg_add nginx

Step 2 – Enable

rcctl enable nginx
rcctl start nginx

Step 3 – PF firewall

Add to /etc/pf.conf:

pass in on egress proto tcp to port { 80 443 }

pfctl -f /etc/pf.conf

Step 4 – Verify

nginx -v
ftp -o - http://localhost

C...

Install Nginx on NetBSD 10

Step 1 – Update pkgin

pkgin update

Step 2 – Install

pkgin install nginx

Step 3 – Enable at boot

Add to /etc/rc.conf:

nginx=YES

/etc/rc.d/nginx start

Step 4 – NPF firewall

Add to /etc/npf.conf:

pass in final proto tcp to any port 80
pass in final p...

Configure Nginx Virtual Hosts on AlmaLinux 9

Step 1 – Create the document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html

Step 2 – Create /etc/nginx/conf.d/example.com.conf

server {
    listen 80;
    listen [::]:80;
    server_name exam...

Configure Nginx Virtual Hosts on RHEL 9

Step 1 – Create the document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html

Step 2 – Create /etc/nginx/conf.d/example.com.conf

server {
    listen 80;
    listen [::]:80;
    server_name example.c...

Configure Nginx Virtual Hosts on Ubuntu 24.04

Step 1 – Create the document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html

Step 2 – Create /etc/nginx/sites-available/example.com

server {
    listen 80;
    listen [::]:80;
    server_name...

Configure Nginx Virtual Hosts on Debian 12

Step 1 – Create the document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html

Step 2 – Create /etc/nginx/sites-available/example.com

server {
    listen 80;
    listen [::]:80;
    server_name ex...

Configure Nginx Virtual Hosts on Gentoo Linux

Step 1 – Create the document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html

Step 2 – Create /etc/nginx/conf.d/example.com.conf

server {
    listen 80;
    listen [::]:80;
    server_name exa...

Configure Nginx Virtual Hosts on Arch Linux

Step 1 – Create the document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html

Step 2 – Create /etc/nginx/sites-available/example.com

server {
    listen 80;
    listen [::]:80;
    server_name e...

Configure Nginx Virtual Hosts on OpenBSD 7.5

Step 1 – Create the document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html

Step 2 – Create /etc/nginx/conf.d/example.com.conf

server {
    listen 80;
    listen [::]:80;
    server_name exam...

Configure Nginx Virtual Hosts on NetBSD 10

Step 1 – Create the document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html

Step 2 – Create /usr/pkg/etc/nginx/conf.d/example.com.conf

server {
    listen 80;
    listen [::]:80;
    server_nam...

Enable TLS/SSL on Nginx – AlmaLinux 9

Step 1 – Self-signed certificate (testing)

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/nginx-selfsigned.key \
    -out /etc/ssl/certs/nginx-selfsigned.crt \
    -subj "/CN=example.com"
openssl dhparam -out /etc/ssl/cert...

Enable TLS/SSL on Nginx – RHEL 9

Step 1 – Self-signed certificate (testing)

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/nginx-selfsigned.key \
    -out /etc/ssl/certs/nginx-selfsigned.crt \
    -subj "/CN=example.com"
openssl dhparam -out /etc/ssl/certs/dhp...

Enable TLS/SSL on Nginx – Ubuntu 24.04

Step 1 – Self-signed certificate (testing)

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/nginx-selfsigned.key \
    -out /etc/ssl/certs/nginx-selfsigned.crt \
    -subj "/CN=example.com"
openssl dhparam -out /etc/ssl/cer...

Enable TLS/SSL on Nginx – Debian 12

Step 1 – Self-signed certificate (testing)

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/nginx-selfsigned.key \
    -out /etc/ssl/certs/nginx-selfsigned.crt \
    -subj "/CN=example.com"
openssl dhparam -out /etc/ssl/certs/...

Enable TLS/SSL on Nginx – Gentoo Linux

Step 1 – Self-signed certificate (testing)

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/nginx-selfsigned.key \
    -out /etc/ssl/certs/nginx-selfsigned.crt \
    -subj "/CN=example.com"
openssl dhparam -out /etc/ssl/cer...

Enable TLS/SSL on Nginx – Arch Linux

Step 1 – Self-signed certificate (testing)

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/nginx-selfsigned.key \
    -out /etc/ssl/certs/nginx-selfsigned.crt \
    -subj "/CN=example.com"
openssl dhparam -out /etc/ssl/certs...

Enable TLS/SSL on Nginx – OpenBSD 7.5

Step 1 – Self-signed certificate (testing)

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/nginx-selfsigned.key \
    -out /etc/ssl/certs/nginx-selfsigned.crt \
    -subj "/CN=example.com"
openssl dhparam -out /etc/ssl/cert...

Enable TLS/SSL on Nginx – NetBSD 10

Step 1 – Self-signed certificate (testing)

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/nginx-selfsigned.key \
    -out /etc/ssl/certs/nginx-selfsigned.crt \
    -subj "/CN=example.com"
openssl dhparam -out /etc/ssl/certs/...

Integrate PHP-FPM with Nginx on AlmaLinux 9

Prerequisites

PHP-FPM installed and running. See PHP-FPM install guide.

Socket path: /run/php-fpm/www.sock

Step 1 – Nginx server block

server {
    listen 80;
    server_name example.com;
    root /var/www/example.com/html;
    index index.php...

Integrate PHP-FPM with Nginx on RHEL 9

Prerequisites

PHP-FPM installed and running. See PHP-FPM install guide.

Socket path: /run/php-fpm/www.sock

Step 1 – Nginx server block

server {
    listen 80;
    server_name example.com;
    root /var/www/example.com/html;
    index index.php inde...

Integrate PHP-FPM with Nginx on Ubuntu 24.04

Prerequisites

PHP-FPM installed and running. See PHP-FPM install guide.

Socket path: /run/php/php8.3-fpm.sock

Step 1 – Nginx server block

server {
    listen 80;
    server_name example.com;
    root /var/www/example.com/html;
    index index...

Integrate PHP-FPM with Nginx on Debian 12

Prerequisites

PHP-FPM installed and running. See PHP-FPM install guide.

Socket path: /run/php/php8.2-fpm.sock

Step 1 – Nginx server block

server {
    listen 80;
    server_name example.com;
    root /var/www/example.com/html;
    index index.ph...

Integrate PHP-FPM with Nginx on Gentoo Linux

Prerequisites

PHP-FPM installed and running. See PHP-FPM install guide.

Socket path: /var/run/php-fpm.sock

Step 1 – Nginx server block

server {
    listen 80;
    server_name example.com;
    root /var/www/example.com/html;
    index index.ph...

Integrate PHP-FPM with Nginx on Arch Linux

Prerequisites

PHP-FPM installed and running. See PHP-FPM install guide.

Socket path: /run/php-fpm/php-fpm.sock

Step 1 – Nginx server block

server {
    listen 80;
    server_name example.com;
    root /var/www/example.com/html;
    index index....

Integrate PHP-FPM with Nginx on OpenBSD 7.5

Prerequisites

PHP-FPM installed and running. See PHP-FPM install guide.

Socket path: /var/run/php-fpm.sock

Step 1 – Nginx server block

server {
    listen 80;
    server_name example.com;
    root /var/www/example.com/html;
    index index.php...

Integrate PHP-FPM with Nginx on NetBSD 10

Prerequisites

PHP-FPM installed and running. See PHP-FPM install guide.

Socket path: /var/run/php-fpm.sock

Step 1 – Nginx server block

server {
    listen 80;
    server_name example.com;
    root /var/www/example.com/html;
    index index.php i...

Configure Nginx as a Reverse Proxy on AlmaLinux 9

Basic reverse proxy

upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen 80;
    server_name app.example.com;
    location / {
        proxy_pass         http://backend;
        proxy_http_version 1.1;
        proxy_set_header   U...

Configure Nginx as a Reverse Proxy on RHEL 9

Basic reverse proxy

upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen 80;
    server_name app.example.com;
    location / {
        proxy_pass         http://backend;
        proxy_http_version 1.1;
        proxy_set_header   Upgrad...

Configure Nginx as a Reverse Proxy on Ubuntu 24.04

Basic reverse proxy

upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen 80;
    server_name app.example.com;
    location / {
        proxy_pass         http://backend;
        proxy_http_version 1.1;
        proxy_set_header...

Configure Nginx as a Reverse Proxy on Debian 12

Basic reverse proxy

upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen 80;
    server_name app.example.com;
    location / {
        proxy_pass         http://backend;
        proxy_http_version 1.1;
        proxy_set_header   Upg...

Configure Nginx as a Reverse Proxy on Gentoo Linux

Basic reverse proxy

upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen 80;
    server_name app.example.com;
    location / {
        proxy_pass         http://backend;
        proxy_http_version 1.1;
        proxy_set_header...

Configure Nginx as a Reverse Proxy on Arch Linux

Basic reverse proxy

upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen 80;
    server_name app.example.com;
    location / {
        proxy_pass         http://backend;
        proxy_http_version 1.1;
        proxy_set_header   Up...

Configure Nginx as a Reverse Proxy on OpenBSD 7.5

Basic reverse proxy

upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen 80;
    server_name app.example.com;
    location / {
        proxy_pass         http://backend;
        proxy_http_version 1.1;
        proxy_set_header   U...

Configure Nginx as a Reverse Proxy on NetBSD 10

Basic reverse proxy

upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen 80;
    server_name app.example.com;
    location / {
        proxy_pass         http://backend;
        proxy_http_version 1.1;
        proxy_set_header   Upg...

Nginx Rate Limiting on AlmaLinux 9

Define zones in http block

http {
    limit_req_zone $binary_remote_addr zone=api:10m     rate=10r/s;
    limit_req_zone $binary_remote_addr zone=login:10m   rate=5r/m;
}

Apply to locations

location /api/ {
    limit_req zone=api burst=20 nodelay;
    lim...

Nginx Rate Limiting on RHEL 9

Define zones in http block

http {
    limit_req_zone $binary_remote_addr zone=api:10m     rate=10r/s;
    limit_req_zone $binary_remote_addr zone=login:10m   rate=5r/m;
}

Apply to locations

location /api/ {
    limit_req zone=api burst=20 nodelay;
    limit_re...

Nginx Rate Limiting on Ubuntu 24.04

Define zones in http block

http {
    limit_req_zone $binary_remote_addr zone=api:10m     rate=10r/s;
    limit_req_zone $binary_remote_addr zone=login:10m   rate=5r/m;
}

Apply to locations

location /api/ {
    limit_req zone=api burst=20 nodelay;
    li...

Nginx Rate Limiting on Debian 12

Define zones in http block

http {
    limit_req_zone $binary_remote_addr zone=api:10m     rate=10r/s;
    limit_req_zone $binary_remote_addr zone=login:10m   rate=5r/m;
}

Apply to locations

location /api/ {
    limit_req zone=api burst=20 nodelay;
    limit...

Nginx Rate Limiting on Gentoo Linux

Define zones in http block

http {
    limit_req_zone $binary_remote_addr zone=api:10m     rate=10r/s;
    limit_req_zone $binary_remote_addr zone=login:10m   rate=5r/m;
}

Apply to locations

location /api/ {
    limit_req zone=api burst=20 nodelay;
    li...

Nginx Rate Limiting on Arch Linux

Define zones in http block

http {
    limit_req_zone $binary_remote_addr zone=api:10m     rate=10r/s;
    limit_req_zone $binary_remote_addr zone=login:10m   rate=5r/m;
}

Apply to locations

location /api/ {
    limit_req zone=api burst=20 nodelay;
    limi...

Nginx Rate Limiting on OpenBSD 7.5

Define zones in http block

http {
    limit_req_zone $binary_remote_addr zone=api:10m     rate=10r/s;
    limit_req_zone $binary_remote_addr zone=login:10m   rate=5r/m;
}

Apply to locations

location /api/ {
    limit_req zone=api burst=20 nodelay;
    lim...

Nginx Rate Limiting on NetBSD 10

Define zones in http block

http {
    limit_req_zone $binary_remote_addr zone=api:10m     rate=10r/s;
    limit_req_zone $binary_remote_addr zone=login:10m   rate=5r/m;
}

Apply to locations

location /api/ {
    limit_req zone=api burst=20 nodelay;
    limit...

Nginx Load Balancing on AlmaLinux 9

Round-robin (default)

upstream myapp {
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
}
server {
    listen 80;
    server_name lb.example.com;
    location / { proxy_pass http://myapp; }
}

Least connections

upstr...

Nginx Load Balancing on RHEL 9

Round-robin (default)

upstream myapp {
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
}
server {
    listen 80;
    server_name lb.example.com;
    location / { proxy_pass http://myapp; }
}

Least connections

upstream m...

Nginx Load Balancing on Ubuntu 24.04

Round-robin (default)

upstream myapp {
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
}
server {
    listen 80;
    server_name lb.example.com;
    location / { proxy_pass http://myapp; }
}

Least connections

upst...

Nginx Load Balancing on Debian 12

Round-robin (default)

upstream myapp {
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
}
server {
    listen 80;
    server_name lb.example.com;
    location / { proxy_pass http://myapp; }
}

Least connections

upstrea...

Nginx Load Balancing on Gentoo Linux

Round-robin (default)

upstream myapp {
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
}
server {
    listen 80;
    server_name lb.example.com;
    location / { proxy_pass http://myapp; }
}

Least connections

upst...

Nginx Load Balancing on Arch Linux

Round-robin (default)

upstream myapp {
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
}
server {
    listen 80;
    server_name lb.example.com;
    location / { proxy_pass http://myapp; }
}

Least connections

upstre...

Nginx Load Balancing on OpenBSD 7.5

Round-robin (default)

upstream myapp {
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
}
server {
    listen 80;
    server_name lb.example.com;
    location / { proxy_pass http://myapp; }
}

Least connections

upstr...

Nginx Load Balancing on NetBSD 10

Round-robin (default)

upstream myapp {
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
}
server {
    listen 80;
    server_name lb.example.com;
    location / { proxy_pass http://myapp; }
}

Least connections

upstrea...

Nginx Security Headers on AlmaLinux 9

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protectio...

Nginx Security Headers on RHEL 9

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protection...

Nginx Security Headers on Ubuntu 24.04

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protecti...

Nginx Security Headers on Debian 12

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protection...

Nginx Security Headers on Gentoo Linux

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protecti...

Nginx Security Headers on Arch Linux

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protection...

Nginx Security Headers on OpenBSD 7.5

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protectio...

Nginx Security Headers on NetBSD 10

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protection...