1) Your /uploads/ directory lists all files uploaded to it. To fix this, add Options -Indexes -FollowSymLinks to your .htaccess for the uploads directory.

1) Your /uploads/ directory lists all files uploaded to it. To fix this, add Options -Indexes -FollowSymLinks to your .htaccess for the uploads directory. 2) You appear to be running nginx as a reverse proxy to apache, but you've left apache open to the world on port 81. Either have it only listen on localhost, or have an iptables rule denying the world connections. Edit: formatting.