Your Admin Panel Has a Side Door
Admin blocks on nginx, Caddy, and Traefik let 2 or 3 of 13 spellings through. A forged Remote-User fooled all three. Caddy's open admin port took a new config.
Tag: nginx
All the articles with the tag "nginx".
Rate Limits That Lock Out the Wrong User
Guide-style rate limits behind a CDN locked out a bystander on nginx, Caddy, and Traefik. Trusting X-Forwarded-For let a forger through 20 of 20. Fixes tested.
Security Headers That Break Your Apps
Seven copy-paste security headers gave nginx static files none, let Traefik overwrite an app's own CSP, and blocked self-framing. Tested configs for all three.
Reverse Proxy TLS: What the A+ Hides
Same A+ before and after hardening, yet nginx drops from 25 TLS 1.2 suites to 3, and an old curve list silently strips post-quantum key exchange on all three.
What Your Reverse Proxy Leaks by Default
Stock nginx shows its exact version on every response and hands your real cert to bare-IP scanners. We audited nginx, Caddy, and Traefik and fixed each leak.
nginx vs Caddy: Measured on 2 Cores
We pinned nginx 1.31 and Caddy 2.11 to 2 CPU cores and measured both. nginx wins per core, but a bare proxy_pass started returning 502s after 28,231 requests.
Dead Container Took Down Prod
A real postmortem: how a forgotten survey-tool container, an uncapped Docker log driver, and rootless networking combined to kill prod for a Monday morning.
Let's Encrypt Without Certbot
Certbot isn't the only ACME client. Explore Caddy, acme.sh, lego, and Step CA, with practical examples for wildcard certs and DNS-01 challenges.
Nginx Proxy Manager for Normal Humans
Set up Nginx Proxy Manager in Docker, get SSL certs, proxy hosts, access lists, and TCP streams, without reading a 40-page nginx manual.
Apache in 2026: It's Time to Move On
Apache still runs half the internet by default, not by choice. Here's why Nginx and Caddy have lapped it, and when to finally make the switch.
Nginx: The Config That Makes Sense
Nginx config demystified: server blocks, location matching, proxy_pass gotchas, rate limiting, and Docker Compose setup, with working examples.
The Reverse Proxy Timeout That Kills Long Uploads
The upload works locally and dies through NGINX. The four timeouts that matter, the config that breaks them, the buffering trap, and how to test first.