Nginx Best Practices Extended
Based on a gisthub configuration, which I thought was worth going through piece by piece.
HTTP2
Avoid If
https://www.nginx.com/resources/wiki/start/topics/depth/ifisevil/
SSL Configuration
HTTP2
- https://www.digitalocean.com/community/tutorials/how-to-set-up-nginx-with-http-2-support-on-ubuntu-16-04
- https://developers.google.com/web/tools/lighthouse/audits/http2
- https://docs.microsoft.com/en-us/iis/get-started/whats-new-in-iis-10/http2-on-iis
Avoid If
https://www.nginx.com/resources/wiki/start/topics/depth/ifisevil/
SSL Configuration
- https://mozilla.github.io/server-side-tls/ssl-config-generator/
- https://stackoverflow.com/questions/24594971/how-to-changehide-the-nginx-server-signature