Security

Catch-all nginx server

Blocks direct requests to IP address which causes noise in logs.

• https://docs.j7k6.org/nginx-default-ssl-site/

openssl req -x509 -newkey rsa:4096 -nodes -sha256 -keyout /etc/ssl/private/ssl-cert-snakeoil.key -out /etc/ssl/certs/ssl-cert-snakeoil.pem -days 3650 -subj "/CN=localhost"

see default.conf

Linode firewall

First line of defense (iptables are still lightly configured)