Like my professional advice if you want to use a web server right now in 2026 is that you should probably just install nginx. Nginx is written in C, it presumptively has hilarious memory bugs sitting in it that will hose you, it's still a mature offering that has been through the wringer.
November 1, 2026 at 6:59 PM
Like my professional advice if you want to use a web server right now in 2026 is that you should probably just install nginx. Nginx is written in C, it presumptively has hilarious memory bugs sitting in it that will hose you, it's still a mature offering that has been through the wringer.
NGINX & web servers: performance and security tips to paste into a real config
Reverse proxy, HTTPS, caching
- these tricks can shave seconds off page load times and boost security.
Learn how to optimize your web server for the fastest possible performance.
#nginx #webperformance
Reverse proxy, HTTPS, caching
- these tricks can shave seconds off page load times and boost security.
Learn how to optimize your web server for the fastest possible performance.
#nginx #webperformance
November 1, 2026 at 11:25 PM
NGINX & web servers: performance and security tips to paste into a real config
Reverse proxy, HTTPS, caching
- these tricks can shave seconds off page load times and boost security.
Learn how to optimize your web server for the fastest possible performance.
#nginx #webperformance
Reverse proxy, HTTPS, caching
- these tricks can shave seconds off page load times and boost security.
Learn how to optimize your web server for the fastest possible performance.
#nginx #webperformance
... Though this did just make me realize I can go through all of nginx's CVEs too, since the errors in nginx vs. apache are at least somewhat decorrelated, I can do every web server's CVE history not just vapache.
November 1, 2026 at 7:26 PM
... Though this did just make me realize I can go through all of nginx's CVEs too, since the errors in nginx vs. apache are at least somewhat decorrelated, I can do every web server's CVE history not just vapache.
nginx installed
certbot installed
ufw rules configured
time to build the Rust crates
certbot installed
ufw rules configured
time to build the Rust crates
November 3, 2026 at 12:05 AM
nginx installed
certbot installed
ufw rules configured
time to build the Rust crates
certbot installed
ufw rules configured
time to build the Rust crates
Formal verification and memory safety together catch maybe like, 90% of bugs. The remaining 10% will still hose you and are nearly by definition logic/design errors, and they're exactly the kind of bugs that have already been linted out of something like nginx but not from your new thing.
November 1, 2026 at 7:04 PM
Formal verification and memory safety together catch maybe like, 90% of bugs. The remaining 10% will still hose you and are nearly by definition logic/design errors, and they're exactly the kind of bugs that have already been linted out of something like nginx but not from your new thing.
Stop thundering herds at your nginx origin shield: proxy_cache_lock queues concurrent misses so one request hits upstream, while stale-while-revalidate and stale-if-error keep serving during. https://www.valtersit.com/vault/nginx-reverse-proxy-with-proxy-cache-lock-and-stalewhilereva-e9d972/
nginx Reverse Proxy with Proxy Cache Lock and Stale-While-Revalidate
www.valtersit.com
November 3, 2026 at 7:10 AM
Stop thundering herds at your nginx origin shield: proxy_cache_lock queues concurrent misses so one request hits upstream, while stale-while-revalidate and stale-if-error keep serving during. https://www.valtersit.com/vault/nginx-reverse-proxy-with-proxy-cache-lock-and-stalewhilereva-e9d972/
NGINX is not just a web server
- it's your digital fortress. 🛡️
In just 3 steps, you can turn any HTTP request into an HTTPS one.
#DevOps #WebPerformance
- it's your digital fortress. 🛡️
In just 3 steps, you can turn any HTTP request into an HTTPS one.
#DevOps #WebPerformance
November 2, 2026 at 5:51 PM
NGINX is not just a web server
- it's your digital fortress. 🛡️
In just 3 steps, you can turn any HTTP request into an HTTPS one.
#DevOps #WebPerformance
- it's your digital fortress. 🛡️
In just 3 steps, you can turn any HTTP request into an HTTPS one.
#DevOps #WebPerformance
Do you know how to use NGINX as a reverse proxy server to secure your web applications and improve performance? 🤔
We'll share some practical tips on caching, HTTPS, and more! 💡
What's the biggest obstacle keeping your web performance from reaching its full potential?
#NGINX #WebPerformance
We'll share some practical tips on caching, HTTPS, and more! 💡
What's the biggest obstacle keeping your web performance from reaching its full potential?
#NGINX #WebPerformance
November 2, 2026 at 2:31 AM
Do you know how to use NGINX as a reverse proxy server to secure your web applications and improve performance? 🤔
We'll share some practical tips on caching, HTTPS, and more! 💡
What's the biggest obstacle keeping your web performance from reaching its full potential?
#NGINX #WebPerformance
We'll share some practical tips on caching, HTTPS, and more! 💡
What's the biggest obstacle keeping your web performance from reaching its full potential?
#NGINX #WebPerformance
Tired of PHP container images that are huge and run everything as root by default?
TrafeX's docker-php-nginx is a ~40MB Alpine image where Nginx, PHP-FPM and supervisord run as nobody, not root, for a more secure setup.
osp.fyi/docker-php-...
TrafeX's docker-php-nginx is a ~40MB Alpine image where Nginx, PHP-FPM and supervisord run as nobody, not root, for a more secure setup.
osp.fyi/docker-php-...
November 1, 2026 at 9:38 AM
Tired of PHP container images that are huge and run everything as root by default?
TrafeX's docker-php-nginx is a ~40MB Alpine image where Nginx, PHP-FPM and supervisord run as nobody, not root, for a more secure setup.
osp.fyi/docker-php-...
TrafeX's docker-php-nginx is a ~40MB Alpine image where Nginx, PHP-FPM and supervisord run as nobody, not root, for a more secure setup.
osp.fyi/docker-php-...
shouldn’t be, this issue is specific to internet-facing Go (ie Caddy), an Nginx gateway should mitigate
October 30, 2026 at 8:35 PM
shouldn’t be, this issue is specific to internet-facing Go (ie Caddy), an Nginx gateway should mitigate
A simple tweak to your NGINX config can boost web performance by up to 30% and security by 25%.
Learn how to do it right now!
NGINX is often misunderstood
#nginx #reverseproxy
Learn how to do it right now!
NGINX is often misunderstood
#nginx #reverseproxy
October 30, 2026 at 10:51 PM
A simple tweak to your NGINX config can boost web performance by up to 30% and security by 25%.
Learn how to do it right now!
NGINX is often misunderstood
#nginx #reverseproxy
Learn how to do it right now!
NGINX is often misunderstood
#nginx #reverseproxy
Nginx split_clients + MurmurHash2 of a cookie/header gives deterministic canary routing: same user always lands in the same bucket. No Lua needed. #nginx #canary #ValtersIT https://www.valtersit.com/vault/nginx-splitclients-headerbased-canary-routing-757431/
Nginx split_clients header-based canary routing
www.valtersit.com
October 30, 2026 at 7:20 AM
Nginx split_clients + MurmurHash2 of a cookie/header gives deterministic canary routing: same user always lands in the same bucket. No Lua needed. #nginx #canary #ValtersIT https://www.valtersit.com/vault/nginx-splitclients-headerbased-canary-routing-757431/
November 2, 2026 at 3:00 PM
Nginx access logs are usually grep'd after the fact. This 200-line beginner script tails them live instead: top-N IPs, paths, status codes as traffic hits. #python #monitoring #nginx https://www.valtersit.com/python/nginx-access-log-real-time-parser/
Nginx Access Log Real-Time Parser
www.valtersit.com
November 3, 2026 at 10:10 PM
Nginx access logs are usually grep'd after the fact. This 200-line beginner script tails them live instead: top-N IPs, paths, status codes as traffic hits. #python #monitoring #nginx https://www.valtersit.com/python/nginx-access-log-real-time-parser/
Nginx RSS Feed: Content Type, Caching and Compression
#PostRSS #MarketingAutomation #Productivity #MarketingTips
https://postrss.com/nginx-rss-feed-caching-content-type/
#PostRSS #MarketingAutomation #Productivity #MarketingTips
https://postrss.com/nginx-rss-feed-caching-content-type/
Nginx RSS Feed: Content Type, Caching and Compression
#PostRSS #MarketingAutomation #Productivity #MarketingTips
postrss.com
November 3, 2026 at 5:03 PM
Nginx RSS Feed: Content Type, Caching and Compression
#PostRSS #MarketingAutomation #Productivity #MarketingTips
https://postrss.com/nginx-rss-feed-caching-content-type/
#PostRSS #MarketingAutomation #Productivity #MarketingTips
https://postrss.com/nginx-rss-feed-caching-content-type/
"Can't reach your nginx? Check these 3 layers." by NAVIN JAIRAM .M
#linux #amazon-ec2 #security-group #networking #troubleshoot
#linux #amazon-ec2 #security-group #networking #troubleshoot
Can't reach your nginx? Check these 3 layers.
Web server running but unreachable? A quick outside-in checklist: Security Group, OS firewall (firewalld/ufw), then the app itself, with the exact commands to test each layer.
community.aws
November 3, 2026 at 6:00 PM
"Can't reach your nginx? Check these 3 layers." by NAVIN JAIRAM .M
#linux #amazon-ec2 #security-group #networking #troubleshoot
#linux #amazon-ec2 #security-group #networking #troubleshoot
Nginx being more “boring”.
November 2, 2026 at 10:03 AM
Nginx being more “boring”.
this *might* impact other atmosphere network services, and in theory any Linux server on the internet.
pragmatically, many Go services are behind a reverse proxy like nginx or haproxy for TLS termination.
however, my old indigo relay deployment directions did recommended Caddy specifically.
pragmatically, many Go services are behind a reverse proxy like nginx or haproxy for TLS termination.
however, my old indigo relay deployment directions did recommended Caddy specifically.
A serious Linux kernel vulnerability announced yesterday may impact PDS self-hosters.
CVE-2026-98432 involves mptcp connections, which the Caddy HTTP proxy enables by default.
An updated container disabling this has been publishes and will auto-deploy to PDS instances in coming hours.
CVE-2026-98432 involves mptcp connections, which the Caddy HTTP proxy enables by default.
An updated container disabling this has been publishes and will auto-deploy to PDS instances in coming hours.
lwn.net
October 30, 2026 at 8:24 PM
this *might* impact other atmosphere network services, and in theory any Linux server on the internet.
pragmatically, many Go services are behind a reverse proxy like nginx or haproxy for TLS termination.
however, my old indigo relay deployment directions did recommended Caddy specifically.
pragmatically, many Go services are behind a reverse proxy like nginx or haproxy for TLS termination.
however, my old indigo relay deployment directions did recommended Caddy specifically.
i have a rlly stupid idea to make static (pregenerated files, served by nginx) tg knot to work and it needs an implementation detail in a software thankfully i can implement that detail bcz i own the software
November 1, 2026 at 6:12 AM
i have a rlly stupid idea to make static (pregenerated files, served by nginx) tg knot to work and it needs an implementation detail in a software thankfully i can implement that detail bcz i own the software
Nginx Proxy Manager Docker Compose: Complete Setup Guide
https://techloverhd.com/2026/11/self-host-nginx-proxy-manager-docker-guide/
#Docker #Homelab
https://techloverhd.com/2026/11/self-host-nginx-proxy-manager-docker-guide/
#Docker #Homelab
November 2, 2026 at 8:49 PM
Nginx Proxy Manager Docker Compose: Complete Setup Guide
https://techloverhd.com/2026/11/self-host-nginx-proxy-manager-docker-guide/
#Docker #Homelab
https://techloverhd.com/2026/11/self-host-nginx-proxy-manager-docker-guide/
#Docker #Homelab
honestly, the fact that this box HASN’T been popped is reassuring from the perspective of “AI attackers are autonomously taking over anything unpatched on the public internet”
It’s running nginx with (presumably) a bunch of CVEs, and a Ubuntu that went out of LTS three years ago!
It’s running nginx with (presumably) a bunch of CVEs, and a Ubuntu that went out of LTS three years ago!
October 31, 2026 at 6:20 PM
honestly, the fact that this box HASN’T been popped is reassuring from the perspective of “AI attackers are autonomously taking over anything unpatched on the public internet”
It’s running nginx with (presumably) a bunch of CVEs, and a Ubuntu that went out of LTS three years ago!
It’s running nginx with (presumably) a bunch of CVEs, and a Ubuntu that went out of LTS three years ago!
Most HestiaCP users enable Nginx FastCGI caching blind, then cache the cart page for 24 hours. Here's a production-hardened config with bypass rules, purging, and debugging. #hestiacp #nginx #php https://www.valtersit.com/guides/hosting/hestiacp-nginx-fastcgi-caching-php-performance-secrets/
HestiaCP Nginx FastCGI Caching: PHP Performance Secrets
www.valtersit.com
November 1, 2026 at 8:50 AM
Most HestiaCP users enable Nginx FastCGI caching blind, then cache the cart page for 24 hours. Here's a production-hardened config with bypass rules, purging, and debugging. #hestiacp #nginx #php https://www.valtersit.com/guides/hosting/hestiacp-nginx-fastcgi-caching-php-performance-secrets/
AI NATIVE INTELLIGENT LOAD BALANCER FOR CLOUD
looks inside: nginx
looks inside: nginx
October 30, 2026 at 8:06 AM
AI NATIVE INTELLIGENT LOAD BALANCER FOR CLOUD
looks inside: nginx
looks inside: nginx
Now why would the Japanese Super Robot Wars wiki restrict access from outside Japan?
Also please tell me this is not permanent.
Also please tell me this is not permanent.
November 2, 2026 at 10:02 PM
Now why would the Japanese Super Robot Wars wiki restrict access from outside Japan?
Also please tell me this is not permanent.
Also please tell me this is not permanent.
Kubernetes「CVE-2025-1974」はCVSS 9.8、認証不要のコード実行でクラスター侵害のおそれ Ingress NGINXは2026年3月に保守終了|セキュリティニュースのセキュリティ対策Lab
https://rocket-boys.co.jp/security-measures-lab/cve_2025_1974_ingressnightmare_kubernetes_ingress_nginx_eol_20261102/
https://rocket-boys.co.jp/security-measures-lab/cve_2025_1974_ingressnightmare_kubernetes_ingress_nginx_eol_20261102/
Kubernetes「CVE-2025-1974」はCVSS 9.8、認証不要のコード実行でクラスター侵害のおそれ Ingress NGINXは2026年3月に保守終了|セキュリティニュースのセキュリティ対策Lab
rocket-boys.co.jp
November 3, 2026 at 2:33 PM
Kubernetes「CVE-2025-1974」はCVSS 9.8、認証不要のコード実行でクラスター侵害のおそれ Ingress NGINXは2026年3月に保守終了|セキュリティニュースのセキュリティ対策Lab
https://rocket-boys.co.jp/security-measures-lab/cve_2025_1974_ingressnightmare_kubernetes_ingress_nginx_eol_20261102/
https://rocket-boys.co.jp/security-measures-lab/cve_2025_1974_ingressnightmare_kubernetes_ingress_nginx_eol_20261102/