We protect the server from any threats. Description of the settings of services that allow to improve security, etc.
In today's world, data encryption is not just a whim, but a direct necessity. In particular, encrypting http traffic is of great importance for all sites where any personal data is processed. And also to protect against mitm attacks.
Thus, the use of Forward Secrecy on web servers becomes mandatory for each site that works using the https protocol and allows you to improve the strength of information encryption.
Forward secrecy can be properly configured in nginx.
(Further…)
Authentication in ssh by key has several advantages. First, the convenience. You can have several servers and one key. It is not necessary to enter the password from the server you need each time, which will save time. Secondly, it is safe. You can disable password authentication and ssh will be protected from brute force.
In this article we will analyze work with Putty on Windows. For it there is a handy utility - pgagent, capable of booting automatically when the OS starts, and storing a private key in memory. It can be used not only for Putty, but also for Filezilla.
ClamAv not bad copes with the search for shells and viruses on sites. One day, he helped me discover a shell cast on a site with WordPress. The problem turned out to be in some kind of plugin, but this is already beyond the scope of the article. :)
For quite a long time on various websites and forums there were articles and topics that spoke of numerous brute-force attacks on wordpress sites. Recently had to face this infection. :)
In this post, I would like to tell you about my experience in dealing with the selection of a password on sites that work on WordPress. Immediately, I note that all my sites work on nginx + php-fpm .