Master programming syntax, solve interactive challenges & run live code in Syntaxis Explore Arena →

menu_book Course Curriculum (Nginx) expand_more

Core Configuration

events block http block server block listen directive server_name root directive index directive include directive

Location Matching

prefix location exact location = regex location ~ case-insensitive regex ~* ^~ precedence try_files named location internal location

Reverse Proxy

proxy_pass proxy_set_header Host X-Forwarded-For proxy_http_version WebSocket Upgrade headers proxy_connect_timeout proxy_read_timeout upstream block

Static Files & Caching

expires directive Cache-Control header gzip compression sendfile open_file_cache immutable assets error_page autoindex

TLS & Security

ssl_certificate ssl_certificate_key TLS protocol selection HSTS header security headers client_max_body_size limit_req rate limiting limit_conn

Operations & Observability

nginx -t config test reload without downtime access_log error_log levels custom log_format stub_status map directive health-check endpoint

Nginx / TLS & Security

security headers

Learn security headers in Nginx with a dedicated explanation, a concept-specific example, practical cautions, and a mastery check.

12 min read • Advanced

nginx-037.conf

nginx

add_header X-Content-Type-Options nosniff always;
add_header Referrer-Policy strict-origin-when-cross-origin always;
add_header Content-Security-Policy "default-src 'self'" always;

What to watch

Content source & attribution

Original Syntaxis Content · Original Syntaxis Content

Lesson quizzes

security headers Mastery Check →

client_max_body_size