The Nxeon Blog
Guides for people who run their own servers.
Straight-talking tutorials and comparisons on VPS hosting, game servers, Linux and security. No fluff, just what actually works. 346 guides from the team that runs the servers.
Search results
12 guides for “nginx” in Security · Clear search
How to Secure a Self-Hosted WordPress Site
WordPress powers a huge share of the web, which makes it a huge target. Harden your self-hosted install at the server, app, and login layers.
DDoS Protection Basics for a VPS
What a DDoS attack actually is, what you can mitigate at the server level, and where you genuinely need upstream protection. A realistic primer.
How to Set Up a UFW Firewall on Ubuntu
UFW makes Linux firewalling approachable. Learn to allow only the ports you need, set default-deny, rate-limit SSH, and verify your rules.
How to Install and Configure fail2ban
fail2ban watches your logs and automatically bans IPs that fail to log in too many times. Here's how to install it and write custom jails.
How to Self-Host Vaultwarden Behind an Nginx Reverse Proxy
Already run Nginx? Here's how to put Vaultwarden behind it properly — real config, Let's Encrypt TLS, WebSocket support and the security headers that matter.
How to Self-Host Vaultwarden (Bitwarden-Compatible) on a VPS
Run your own password vault with Vaultwarden, a lightweight server that works with every official Bitwarden app. Docker install with HTTPS in minutes.
How to Secure a WordPress Site on a VPS
Running WordPress on your own VPS means owning its security — which is a good thing. This practical checklist locks down the server, PHP and WordPress itself.
How to Get a Free SSL Certificate with Certbot
Secure any site with a free, auto-renewing Let's Encrypt certificate using Certbot on Ubuntu 24.04 — for Nginx or Apache.
Free SSL certificates on your VPS with Let's Encrypt
HTTPS is free and automatic. Here's how to issue a Let's Encrypt certificate on your VPS, set up auto-renewal, and never see an expiry warning again.
How to set up fail2ban to stop brute-force attacks
fail2ban watches your logs and bans IPs that keep failing logins. Learn to install it, protect SSH, tune ban times, and add jails for web services.
How to harden a Linux server: a practical checklist
A public server is probed within minutes of going online. This hardening checklist covers users, SSH, firewalls, updates, fail2ban and monitoring — step by step.
UFW firewall basics: lock down your VPS
UFW makes Linux firewalling simple. Learn to allow SSH and web traffic, block everything else, and manage rules safely without locking yourself out.
Deploy your first server in under a minute.
Creating an account is free and takes no card details. Every guide here runs on a Nxeon VPS or game server.