Thinhnam.net Configuration -
<Directory /var/www/thinhnam.net/html> Options -Indexes +FollowSymLinks AllowOverride All Require all granted </Directory>
SSLEngine on SSLCertificateFile /etc/ssl/certs/thinhnam.net/fullchain.pem SSLCertificateKeyFile /etc/ssl/private/thinhnam.net/privkey.pem
ln -s /etc/nginx/sites-available/thinhnam.net /etc/nginx/sites-enabled/ nginx -t && systemctl reload nginx Create /etc/apache2/sites-available/thinhnam.net.conf Thinhnam.net Configuration
location / try_files $uri $uri/ =404;
ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256; ssl_prefer_server_ciphers off; ssl_session_timeout 1d; ssl_session_cache shared:SSL:10m; ssl_session_tickets off; | Measure | Command / Action | |---------|------------------| | Disable directory listing | Nginx: autoindex off; / Apache: Options -Indexes | | Remove server version | Nginx: server_tokens off; / Apache: ServerSignature Off | | Limit upload size | client_max_body_size 10M; (Nginx) or LimitRequestBody 10485760 (Apache) | | Block bad bots | Use if ($http_user_agent ~* (badbot|scraper)) return 403; (Nginx) | | Regular updates | sudo apt update && sudo apt upgrade | 6. Email Configuration (If Self-Hosting) Install a mail stack (Postfix + Dovecot): <Directory /var/www/thinhnam
# Security Headers add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Content-Type-Options "nosniff" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always;
# PHP-FPM (if using PHP) location ~ \.php$ include snippets/fastcgi-php.conf; fastcgi_pass unix:/var/run/php/php8.1-fpm.sock; ssl_protocols TLSv1.2 TLSv1.3
# Logs access_log /var/log/nginx/thinhnam.net_access.log; error_log /var/log/nginx/thinhnam.net_error.log;