11.6K ·GitHub
What is this?
A collection of ready-made Nginx server configuration files (by the H5BP project) that improve a website's performance and security, set correct content-types, and handle cross-domain resource access.
A collection of ready-made Nginx server configuration files (by the H5BP project) that improve a website's performance and security, set correct content-types, and handle cross-domain resource access.Is this a full nginx.conf replacement or just snippets I include?Both: it ships a full repository structure (nginx.conf, mime.types, conf.d, templates) that you can use directly, plus individual h5bp/ config snippets (mixins) you can selectively include, like basic.conf which bundles the recommended always-on rules.
Both: it ships a full repository structure (nginx.conf, mime.types, conf.d, templates) that you can use directly, plus individual h5bp/ config snippets (mixins) you can selectively include, like basic.conf which bundles the recommended always-on rules.How do I start using these configs?Either reference them by downloading/checking out the repo and copying the rules you need into your existing nginx.conf, or use it directly by replacing your Nginx config directory with this repository entirely.
Either reference them by downloading/checking out the repo and copying the rules you need into your existing nginx.conf, or use it directly by replacing your Nginx config directory with this repository entirely.What version of Nginx do I need?Nginx 1.8.0 or newer.
Nginx 1.8.0 or newer.Do I need to edit the files before they work on my server?Yes — you must check nginx.conf for install-specific values (user, errorlog, pid, accesslog) and, when using the provided templates, copy them into conf.d and replace every example.com occurrence with your actual domain.
Yes — you must check nginx.conf for install-specific values (user, errorlog, pid, accesslog) and, when using the provided templates, copy them into conf.d and replace every example.com occurrence with your actual domain.How is the repository organized so I can find what I need?conf.d/ holds server definitions, templates/ has copy-ready templates for secure/non-secure hosts, h5bp/ contains reusable config snippets and location/ directives, custom.d/ is for your own custom config, plus top-level mime.types and nginx.conf files.
conf.d/ holds server definitions, templates/ has copy-ready templates for secure/non-secure hosts, h5bp/ contains reusable config snippets and location/ directives, custom.d/ is for your own custom config, plus top-level mime.types and nginx.conf files.How do I check my config is valid before applying it?The README documents commands to verify the Nginx config, verify it with a custom file path, and reload Nginx to apply the new config without restarting.
The README documents commands to verify the Nginx config, verify it with a custom file path, and reload Nginx to apply the new config without restarting.What does basic.conf give me out of the box?It loads a small, recommended subset of the repo's rules that add expires headers, allow cross-domain fonts, and protect system files from web access.
It loads a small, recommended subset of the repo's rules that add expires headers, allow cross-domain fonts, and protect system files from web access.How do I add or remove a site?The README outlines steps for creating a new site, then enabling or disabling it by managing its config file within the sites structure.
The README outlines steps for creating a new site, then enabling or disabling it by managing its config file within the sites structure.What are similar projects?nginx-admins-handbook, nginxconfig.io, nginx, azerioid-stack-manager, acme.sh, htaccess, tengine, goaccess
nginx-admins-handbook, nginxconfig.io, nginx, azerioid-stack-manager, acme.sh, htaccess, tengine, goaccessWhich topics is it in?standard, config, nginx, best-practices, sysadmin, devops, performance, security, server, self-hosted, mit, linux
standard, config, nginx, best-practices, sysadmin, devops, performance, security, server, self-hosted, mit, linux