nginx Config Generator

nginx (engine-x) is a high-performance web server and reverse proxy. Use it to serve static sites with incredible speed, proxy requests to Node.js/Python/PHP apps, terminate SSL/TLS, and add security headers. It handles 10,000+ concurrent connections with minimal RAM — far more efficient than Apache for most workloads.

nginx uses an event-driven, asynchronous architecture — one worker process handles many connections simultaneously. Apache uses a process/thread-per-connection model. Result: nginx uses less memory and performs better under high concurrency. Apache's .htaccess per-directory config is more flexible but slower. For modern deployments, nginx is the dominant choice.

Install Certbot: sudo apt install certbot python3-certbot-nginx. Run: sudo certbot --nginx -d example.com -d www.example.com. Certbot will obtain certificates and automatically update your nginx config. It also sets up auto-renewal via a systemd timer.

It forwards incoming requests from nginx to a backend server running locally on port 3000 (e.g., a Node.js app). nginx acts as a reverse proxy — clients connect to nginx (port 80/443), and nginx forwards the request internally. This lets you run multiple apps on one server and handle SSL at the nginx layer.

Key security headers: X-Frame-Options: SAMEORIGIN (prevents clickjacking), X-Content-Type-Options: nosniff (prevents MIME sniffing), X-XSS-Protection (legacy XSS filter), Referrer-Policy: no-referrer-when-downgrade (controls referrer info), and Strict-Transport-Security (HSTS, forces HTTPS). For CSP (Content-Security-Policy), add it manually tailored to your app.

Run: sudo nginx -t. This validates the configuration syntax without reloading. If it shows 'syntax is ok', apply with: sudo systemctl reload nginx (graceful, zero-downtime). Never use restart unless necessary — reload sends a SIGHUP which allows existing connections to finish.