{"id":43013,"date":"2024-06-04T07:31:05","date_gmt":"2024-06-04T07:31:05","guid":{"rendered":"https:\/\/accuweb.cloud\/resource\/?post_type=faq&p=43013"},"modified":"2026-02-18T13:53:38","modified_gmt":"2026-02-18T13:53:38","slug":"nginx-security-configuration","status":"publish","type":"faq","link":"https:\/\/accuweb.cloud\/resource\/articles\/nginx-security-configuration","title":{"rendered":"Security Configurations for NGINX"},"content":{"rendered":"

Security Configurations for NGINX<\/h2>\n

In this guide, we’ll walk you through configuring additional security measures for your PHP application running on an NGINX application server.<\/p>\n

You can implement the following security configurations:<\/p>\n

    \n
  1. Authentication<\/a><\/li>\n
  2. Access Criteria Setup<\/a><\/li>\n<\/ol>\n

    Security Through Authentication<\/h2>\n

    To implement authentication security measures, follow these steps:<\/p>\n

    Step 1.<\/strong> Generate a hash from your password using any htpasswd <\/strong>tool.
    \nStep 2.<\/strong> Create a simple text file containing the previously generated hash.
    \nStep 3.<\/strong> Click on the     “Config”<\/a> button for your server.
    \nStep 4.<\/strong> Upload the created file to the \/var\/www\/webroot\/ROOT<\/strong> directory.<\/p>\n

    \"Upload<\/a><\/p>\n

    In the \/etc\/nginx<\/strong> directory, open the nginx.conf<\/strong> file and update the directory configurations as follows:<\/p>\n

    Step 1.<\/strong> For authentication across the entire application<\/strong>, modify the location configurations by adding the following lines:<\/p>\n

    <\/div>\n
    \r\nauth_basic \"Restricted area\";\r\nauth_basic_user_file \/var\/www\/webroot\/ROOT\/.htpasswd;<\/code><\/pre>\n
    <\/div>\n
    \"Modify<\/a><\/p>\n
    Step 2.<\/strong> For authentication in a specific directory,<\/strong> add the following location block, specifying the path to the desired directory:<\/p>\n
    <\/div>\n
    \r\nlocation ~ \/directory_path {\r\nauth_basic \"Restricted\";\r\nauth_basic_user_file \/var\/www\/webroot\/ROOT\/.htpasswd;}<\/code><\/pre>\n
    <\/div>\n
    Step 3.<\/strong> Save the changes and Restart<\/strong> NGINX.<\/p>\n
    As a result, when accessing the application or the protected directory, users will be prompted to authenticate.<\/p>\n
    Security through setting up criteria<\/h2>\n
    To enhance security, you can set up criteria such as allowing or denying access based on IP address. This is achieved using the Allow<\/strong> and Deny<\/strong> directives in the nginx.conf file located in the \/etc\/nginx<\/strong> directory. Below are the steps to configure access restrictions:<\/p>\n
    Step 1.<\/strong> Deny access to the whole application: Modify the location configurations using the following directives:<\/p>\n
    <\/div>\n
    \r\ndeny xx.xx.xx.x;\r\nallow xx.xx.xx.x;\r\ndeny all;<\/code><\/pre>\n
    <\/div>\n
    \"Deny<\/a><\/p>\n
    These directives will deny access to the specified IP address (xx.xx.xx.x) while allowing access to another IP address and denying access to all other addresses.<\/p>\n
    By implementing these criteria, you can effectively control access to your application based on IP addresses.<\/p>\n
    \"Controlled<\/a><\/p>\n
    Deny Access to a Specific Directory<\/h3>\n
    To restrict access to a specific directory, add the following location block to your nginx.conf file, specifying the path to the directory you wish to protect:<\/p>\n
    <\/div>\n
    \r\nlocation \/directory_path {\r\ndeny 192.xx.xx.100;\r\nallow 203.xx.xx.10;\r\ndeny all;\r\n}<\/code><\/pre>\n
    <\/div>\n
    In this example:<\/h4>\n