For folks interested in further reading, I like this guide for hardening nginx: https://github.com/trimstray/nginx-admins-handbook https://github.com/trimstray/

For folks interested in further reading, I like this guide for hardening nginx: https://github.com/trimstray/nginx-admins-handbook https://github.com/trimstray/nginx-admins-handbook Seems some very critical security mechanisms (such as CSP) still require additional/careful user config, and don't get highlighted by the guides. Might help to add a walk-through or, e.g. link to a good CSP generator tool. Also I wonder if compiling from source then using `FROM scratch` would improve security even further, similar to this nginx container image: https://github.com/ricardbejarano/nginx https://github.com/ricardbejarano/nginx