The nginx tag has no wiki summary.
18
votes
5answers
5k views
Trying to make a Django-based site use HTTPS-only, not sure if it's secure?
The EFF recommends using HTTPS everywhere on your site, and I'm sure this site would agree. When I asked a question about using Django to implement HTTPS on my login page, that was certainly the ...
4
votes
2answers
659 views
What are the dangers of storing webserver temp files in the /tmp/ folder?
I have configured my first publicly accessible nginx server. I have configured it to use a /tmp/nginx folder to store temp files. This includes the body of http requests, proxy files etc. The /tmp ...
3
votes
7answers
1k views
Server compromised for 2nd time, cannot locate source of attack
I need some help tracing a vulnerability on my server. For the second time, my server has been compromised with files being replaced with virus-ridden downloads.
According to the filesystem dates, ...
3
votes
1answer
2k views
My web server is hit by strange traffic, what is that?
I'm a noob and just set-up a linode account to play around with linux development.
I started nginx and made a simple homepage for my domain (giuliopizzini.com).
Today I checked the nginx logs and ...
3
votes
2answers
218 views
Restarting nginx with Jenkins or Phing - is it safe to allow Jenkins to run sudo without prompt for password
I am implementing the recommendations from Integrating PHP projects with Jenkins for my own PHP projects.
I have created a jenkins user in my ubuntu 12.10 server. I used Phing as my build tool and I ...
1
vote
2answers
95 views
Guarding against XSS when setting Cookies based on URI?
I have a web-site written in nginx.conf — http://mdoc.su/ — which essentially accepts two parameters, an operating system and a manual page name, and does a redirect to a different site based on the ...
