Nginx Security Headers on AlmaLinux 9

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protectio...

Nginx Security Headers on Arch Linux

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protection...

Nginx Security Headers on Debian 12

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protection...

Nginx Security Headers on Gentoo Linux

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protecti...

Nginx Security Headers on NetBSD 10

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protection...

Nginx Security Headers on OpenBSD 7.5

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protectio...

Nginx Security Headers on RHEL 9

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protection...

Nginx Security Headers on Ubuntu 24.04

Create /etc/nginx/snippets/security-headers.conf

add_header X-Frame-Options            "SAMEORIGIN"                                 always;
add_header X-Content-Type-Options     "nosniff"                                    always;
add_header X-XSS-Protecti...

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) reque...

How-to guides for installing and configuring Nginx on AlmaLinux, RHEL, Ubuntu, Debian, Gentoo, Arch, OpenBSD and NetBSD.

Steps to setup easy-openvpn on Ubuntu Core

This gist is to accompany a more wordy blog post which covers everything in much more detail. These are the easily copy/pastable steps.

For this you will need:-

• Raspberry Pi 2 or 3, PSU, keyboard, LAN connection, HDMI cable and display
• Laptop/desk...

Setting up an OpenVPN server

Pre-requisites

Install openvpn. On Debian/Ubuntu:

apt-get install openvpn easy-rsa

Certificate setup

cd /etc/openvpn          # Pick any directory

make-cadir easy-rsa   # Directory to store easy-rsa CA

Edit the variables in easy-rsa/vars and set appropr...

Configuring the OpenWhisk server

Manually setting up Openwhisk and CouchDB on a fresh Ubuntu 16.04 server.

Based on the OpenWhisk Ansible README, which at the time of writing is missing some key steps - hence this new guide.

1. Dependencies

sudo apt-get update
sudo apt-get upgrade
sudo ap...

Install

wget https://dl-ssl.google.com/dl/linux/direct/mod-pagespeed-stable_current_amd64.deb

sudo dpkg -i mod-pagespeed-*.deb && apt-get -f install

service apache2 restart or /etc/init.d/apache2 restart

The primary configuration file is pagespeed.conf. This file is located at:

/etc/apache...

Deploy and manage Percona XtraDB Cluster (PXC) with synchronous multi-master replication.

Install NGINX

sudo yum install nginx -y

Install PHP and PHP-FPM

sudo yum install php -y

sudo yum install php-fpm -y

Configure NGINX (see below)

sudo nano /etc/nginx/conf.d/default.conf

server {
    listen 80;
    server_name www.exampledomain.tld exampledomain.tld;

    location / {...

Install PHP-FPM, configure pools, tune OPcache and optimise performance for every supported OS.

PHP-FPM Multiple Pools on AlmaLinux 9

Pool directory: /etc/php-fpm.d/

Create /etc/php-fpm.d/site1.conf

[site1]
user  = site1
group = site1
listen = /run/php-fpm/site1.sock
listen.owner = www-data
listen.group = www-data
listen.mode  = 0660
pm = dynamic
pm.max_children      = 10
pm.start_serv...

PHP-FPM Multiple Pools on Arch Linux

Pool directory: /etc/php/php-fpm.d/

Create /etc/php/php-fpm.d/site1.conf

[site1]
user  = site1
group = site1
listen = /run/php-fpm/site1.sock
listen.owner = www-data
listen.group = www-data
listen.mode  = 0660
pm = dynamic
pm.max_children      = 10
pm.sta...

PHP-FPM Multiple Pools on Debian 12

Pool directory: /etc/php/8.2/fpm/pool.d/

Create /etc/php/8.2/fpm/pool.d/site1.conf

[site1]
user  = site1
group = site1
listen = /run/php-fpm/site1.sock
listen.owner = www-data
listen.group = www-data
listen.mode  = 0660
pm = dynamic
pm.max_children      =...

PHP-FPM Multiple Pools on Gentoo Linux

Pool directory: /etc/php/fpm-php8.2/fpm.d/

Create /etc/php/fpm-php8.2/fpm.d/site1.conf

[site1]
user  = site1
group = site1
listen = /run/php-fpm/site1.sock
listen.owner = www-data
listen.group = www-data
listen.mode  = 0660
pm = dynamic
pm.max_children...

PHP-FPM Multiple Pools on NetBSD 10

Pool directory: /etc/php-fpm.d/

Create /etc/php-fpm.d/site1.conf

[site1]
user  = site1
group = site1
listen = /run/php-fpm/site1.sock
listen.owner = www-data
listen.group = www-data
listen.mode  = 0660
pm = dynamic
pm.max_children      = 10
pm.start_server...

PHP-FPM Multiple Pools on OpenBSD 7.5

Pool directory: /etc/php-fpm.d/

Create /etc/php-fpm.d/site1.conf

[site1]
user  = site1
group = site1
listen = /run/php-fpm/site1.sock
listen.owner = www-data
listen.group = www-data
listen.mode  = 0660
pm = dynamic
pm.max_children      = 10
pm.start_serv...

PHP-FPM Multiple Pools on RHEL 9

Pool directory: /etc/php-fpm.d/

Create /etc/php-fpm.d/site1.conf

[site1]
user  = site1
group = site1
listen = /run/php-fpm/site1.sock
listen.owner = www-data
listen.group = www-data
listen.mode  = 0660
pm = dynamic
pm.max_children      = 10
pm.start_servers...