4 ms·
Great writeup. One suggestion on the nginx front I might suggest is you add an entry to drop requests for unknown hosts. e.g. http://104.131.41.220 http://104.
by meritt 12y ago
Great writeup. One suggestion on the nginx front I might suggest is you add an entry to drop requests for unknown hosts. e.g. http://104.131.41.220 http://104.131.41.220
https://github.com/h5bp/server-configs-nginx/blob/master/sites-available/no-default https://github.com/h5bp/server-configs-nginx/blob/master/sit...
That github repo is a goldmine for understanding nginx configs too.
- jonmccartie 12y agoGood call. Thanks, man.
- latch 12y agoother things to consider: # if you compiled --with-http_spdy_module listen 443 ssl spdy; # amusing how many of these you'll get location ~*\.php { add_header "Not Found" 404; } # pretty sure you need to do this to have keepalive working # between nginx and the upstream proxy_set_header Connection ""; proxy_http_version 1.1; # buffer writes to disk (for a busy site, you can use much larger values than 1K) access_log /var/log/nginx/access.log buffer=1K; # cache the ssl connction parameters ssl_session_cache shared:SSL:20m; ssl_session_timeout 10m;
- jonmccartie 12y agoThe .php block gave me a good laugh. Great idea. Just rejecting /wp-admin.php should reduce load significantly. :)