Thinhnam.net Configuration Page

server listen 443 ssl http2; listen [::]:443 ssl http2; server_name thinhnam.net www.thinhnam.net;

# Root directory root /var/www/thinhnam.net/html; index index.html index.php;

# SSL (see Section 4) ssl_certificate /etc/ssl/certs/thinhnam.net/fullchain.pem; ssl_certificate_key /etc/ssl/private/thinhnam.net/privkey.pem; Thinhnam.net Configuration

# Logs access_log /var/log/nginx/thinhnam.net_access.log; error_log /var/log/nginx/thinhnam.net_error.log;

You can adapt the specific code blocks based on your hosting environment. 1. Overview Domain: thinhnam.net Purpose: This document provides standard configurations for DNS, web server (Apache/Nginx), SSL/TLS security, email, and performance tuning. 2. DNS Configuration (Essential First Step) Configure your domain’s DNS records at your registrar or DNS hosting provider. server listen 443 ssl http2; listen [::]:443 ssl

location / try_files $uri $uri/ =404;

<VirtualHost *:80> ServerName thinhnam.net ServerAlias www.thinhnam.net Redirect permanent / https://thinhnam.net/ </VirtualHost> <VirtualHost *:443> ServerName thinhnam.net ServerAlias www.thinhnam.net DocumentRoot /var/www/thinhnam.net/html Email Configuration (If Self-Hosting) Install a mail stack

ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256; ssl_prefer_server_ciphers off; ssl_session_timeout 1d; ssl_session_cache shared:SSL:10m; ssl_session_tickets off; | Measure | Command / Action | |---------|------------------| | Disable directory listing | Nginx: autoindex off; / Apache: Options -Indexes | | Remove server version | Nginx: server_tokens off; / Apache: ServerSignature Off | | Limit upload size | client_max_body_size 10M; (Nginx) or LimitRequestBody 10485760 (Apache) | | Block bad bots | Use if ($http_user_agent ~* (badbot|scraper)) return 403; (Nginx) | | Regular updates | sudo apt update && sudo apt upgrade | 6. Email Configuration (If Self-Hosting) Install a mail stack (Postfix + Dovecot):

sudo apt install postfix dovecot-core dovecot-imapd dovecot-pop3d