Hardening - Revision history

Xbl: /* Server Config */

2023-01-04T13:00:04Z

Server Config

← Older revision		Revision as of 15:00, 4 January 2023
Line 11:		Line 11:
	=== Server Config ===		=== Server Config ===
	/etc/nginx/conf.d/wordpress.conf</br>		/etc/nginx/conf.d/wordpress.conf</br>
	<code>location /(wp-admin~~\|wp-login\.php)~~ {\ allow 1.2.3.4;\ deny all;\ }</code> Block access to /wp-admin/, unless source IP is 1.2.3.4</br>		<code>location /wp-admin {\ allow 1.2.3.4;\ deny all;\ }</code> Block access to /wp-admin/, unless source IP is 1.2.3.4</br>

Xbl: /* HTTP Config */

2023-01-04T12:58:35Z

HTTP Config

← Older revision		Revision as of 14:58, 4 January 2023
Line 7:		Line 7:
	<code>add_header X-Content-Type-Options nosniff</code> Avoid MIME type sniffing by saying that the MIME types are deliberately configured</br>		<code>add_header X-Content-Type-Options nosniff</code> Avoid MIME type sniffing by saying that the MIME types are deliberately configured</br>
	<code>add_header X-XSS-Protection "1; mode=block"</code> lock pages from loading when they detect reflected XSS attacks</br>		<code>add_header X-XSS-Protection "1; mode=block"</code> lock pages from loading when they detect reflected XSS attacks</br>
	<code>add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;</code> enable HSTS</br>		<code>add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always</code> enable HSTS</br>

	=== Server Config ===		=== Server Config ===
	/etc/nginx/conf.d/wordpress.conf</br>		/etc/nginx/conf.d/wordpress.conf</br>
	<code>location /(wp-admin\|wp-login\.php) {\ allow 1.2.3.4;\ deny all;\ }</code> Block access to /wp-admin/, unless source IP is 1.2.3.4</br>		<code>location /(wp-admin\|wp-login\.php) {\ allow 1.2.3.4;\ deny all;\ }</code> Block access to /wp-admin/, unless source IP is 1.2.3.4</br>

Xbl: /* Server Config */

2023-01-04T12:58:10Z

Server Config

← Older revision		Revision as of 14:58, 4 January 2023
Line 10:		Line 10:

	=== Server Config ===		=== Server Config ===
			/etc/nginx/conf.d/wordpress.conf</br>
	<code>location /(wp-admin\|wp-login\.php) {\ allow 1.2.3.4;\ deny all;\ }</code> Block access to /wp-admin/, unless source IP is 1.2.3.4</br>		<code>location /(wp-admin\|wp-login\.php) {\ allow 1.2.3.4;\ deny all;\ }</code> Block access to /wp-admin/, unless source IP is 1.2.3.4</br>

Xbl: /* HTTP Config */

2023-01-04T12:40:24Z

HTTP Config

← Older revision		Revision as of 14:40, 4 January 2023
Line 7:		Line 7:
	<code>add_header X-Content-Type-Options nosniff</code> Avoid MIME type sniffing by saying that the MIME types are deliberately configured</br>		<code>add_header X-Content-Type-Options nosniff</code> Avoid MIME type sniffing by saying that the MIME types are deliberately configured</br>
	<code>add_header X-XSS-Protection "1; mode=block"</code> lock pages from loading when they detect reflected XSS attacks</br>		<code>add_header X-XSS-Protection "1; mode=block"</code> lock pages from loading when they detect reflected XSS attacks</br>
			<code>add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;</code> enable HSTS</br>

	=== Server Config ===		=== Server Config ===
	<code>location /(wp-admin\|wp-login\.php) {\ allow 1.2.3.4;\ deny all;\ }</code> Block access to /wp-admin/, unless source IP is 1.2.3.4</br>		<code>location /(wp-admin\|wp-login\.php) {\ allow 1.2.3.4;\ deny all;\ }</code> Block access to /wp-admin/, unless source IP is 1.2.3.4</br>

Xbl: Created page with "= nginx = === HTTP Config === /etc/nginx/nginx.conf:
`server_tokens off` Stop the server from advertising versions
`add_header X-Frame-Options SAMEORIGIN always` Stop the website to be framed into other websites
`add_header X-Content-Type-Options nosniff` Avoid MIME type sniffing by saying that the MIME types are deliberately configured
`add_header X-XSS-Protection "1; mode=block"` lock pages from loading w..."

2023-01-03T20:08:42Z

Created page with "= nginx = === HTTP Config === /etc/nginx/nginx.conf: <code>server_tokens off</code> Stop the server from advertising versions <code>add_header X-Frame-Options SAMEORIGIN always</code> Stop the website to be framed into other websites <code>add_header X-Content-Type-Options nosniff</code> Avoid MIME type sniffing by saying that the MIME types are deliberately configured <code>add_header X-XSS-Protection "1; mode=block"</code> lock pages from loading w..."

New page

= nginx =

=== HTTP Config ===
/etc/nginx/nginx.conf:
<code>server_tokens off</code> Stop the server from advertising versions
<code>add_header X-Frame-Options SAMEORIGIN always</code> Stop the website to be framed into other websites
<code>add_header X-Content-Type-Options nosniff</code> Avoid MIME type sniffing by saying that the MIME types are deliberately configured
<code>add_header X-XSS-Protection "1; mode=block"</code> lock pages from loading when they detect reflected XSS attacks

=== Server Config ===
<code>location /(wp-admin|wp-login\.php) {\ allow 1.2.3.4;\ deny all;\ }</code> Block access to /wp-admin/, unless source IP is 1.2.3.4