security2get4php-fpm+nginx

dragonxi

Any advice to have a good security solution for
PHP-FPM+Nginx applications running at www.opastack.com servers ?

Would any of the following advice be useful for DIY solution ?

(1)Configuring NGINX and NGINX Plus for HTTP Basic Authentication by nginx.com ?

https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

(2) How To Set Up Password Authentication with Nginx on Ubuntu 14.04 by www.digitalocean.com ?

https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

(3) How to limit access to website during development by www.siteground.com ?

https://www.siteground.com/kb/limit-access-website-development/

(4) Password-Protect Access To An Application With NGINX by bitnami.com ?

https://docs.bitnami.com/ibm/apps/wordpress-pro/administration/use-htpasswd/

(5)password protect the website running on nginx php fpm by codexpedia.com ?

https://www.codexpedia.com/php/password-protect-the-website-running-on-nginx-php-fpm/

(6) any other useful URL to study ?

Thanks in advance for any tip!

sean

We do not have any configurable Nginx options for Nginx+FPM apps at this time other than the FPM performance parameters and PHP versions.

We do have an open feature request for HTTP authentication with Nginx apps so I'll make a note of your interest in that and will follow up here when it is available.

dragonxi

sean OK, keep in touch!

christer

Any news on this?

sean

christer none yet.

If you need Nginx + password protection at this time then I recommend you use a private Nginx stack: HOWTO run a private PHP-FPM stack on Nginx or Apache on Opalstack - Opalstack Community Forum