-
-
Save ahmeti/a59f9b3a1854f3927d8bf15d69587b9a to your computer and use it in GitHub Desktop.
Ubuntu Nginx Güvenlik Önlemleri
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# To disable tunneled clear text passwords, change to no here! | |
PasswordAuthentication no |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
PermitRootLogin no |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
sudo ufw enable | |
sudo ufw status numbered | |
# Aşağıdaki kurallar haricindeki tüm kuralları siliyoruz. | |
# Diğer kuralları silmek için; | |
sudo ufw delete kural-numarasi | |
# Silme işlemlerinden sonra ufw status aşağıda görülmektedir. | |
To Action From | |
-- ------ ---- | |
22/tcp LIMIT Anywhere | |
443/tcp ALLOW Anywhere | |
22/tcp (v6) LIMIT Anywhere (v6) | |
443/tcp (v6) ALLOW Anywhere (v6) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
server { | |
server_name _; | |
listen 443 ssl http2 default_server; | |
listen [::]:443 ssl http2 default_server; # ip v6 | |
ssl_reject_handshake on; # ssl doğrulamasını reddediyoruz v1.19.4+ | |
return 444; # Bağlantıyı herhangi bir veri göndermeden kapatıyoruz. | |
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
http { | |
# Tüm IP adreslerine izin verir!!! | |
# set_real_ip_from 0.0.0.0/0; | |
# Cloudflare IPv4 Addresses (https://www.cloudflare.com/ips-v4) | |
set_real_ip_from 173.245.48.0/20; | |
set_real_ip_from 103.21.244.0/22; | |
set_real_ip_from 103.22.200.0/22; | |
set_real_ip_from 103.31.4.0/22; | |
set_real_ip_from 141.101.64.0/18; | |
set_real_ip_from 108.162.192.0/18; | |
set_real_ip_from 190.93.240.0/20; | |
set_real_ip_from 188.114.96.0/20; | |
set_real_ip_from 197.234.240.0/22; | |
set_real_ip_from 198.41.128.0/17; | |
set_real_ip_from 162.158.0.0/15; | |
set_real_ip_from 104.16.0.0/13; | |
set_real_ip_from 104.24.0.0/14; | |
set_real_ip_from 172.64.0.0/13; | |
set_real_ip_from 131.0.72.0/22; | |
# Cloudflare IPv6 Addresses (https://www.cloudflare.com/ips-v6) | |
set_real_ip_from 2400:cb00::/32; | |
set_real_ip_from 2606:4700::/32; | |
set_real_ip_from 2803:f800::/32; | |
set_real_ip_from 2405:b500::/32; | |
set_real_ip_from 2405:8100::/32; | |
set_real_ip_from 2a06:98c0::/29; | |
set_real_ip_from 2c0f:f248::/32; | |
real_ip_header CF-Connecting-IP; | |
server { | |
... | |
} | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment