CentOS System Administration Essentials

Best practices of Nginx

If you choose to implement the Nginx web server, there are few things that we should take a look at to endure the longevity of your web service.

From a security perspective, your web server could be accessible to the whole world, everyone. For this reason, we should ensure that some basic security threats are protected:

• SELinux: Ensure that we have set SELinux to Enforcing on our CentOS system that hosts Nginx.
• DocumentRoot: Mount the DocumentRoot structure independently as its own filesystem, ensuring that malicious writes will not crash the Linux host if the disk fills, and secondly the partition or disk can be mounted with minimal rights, for example, LABEL=web /var/www ext4 ro,nosuid,noexec,nodev,noatime 0 2.
• Use a host-based ...