{"type":"doc","content":[{"type":"heading","attrs":{"level":1},"content":[{"type":"text","text":"Securing NGINX with CloudFlare"}]},{"type":"paragraph","content":[{"type":"text","text":"The goal is to install NGINX and then only allow access via CloudFlare. This completely hides your IP from users so there is no known IP to attack. This helps prevent attempted hacks, denial of service attacks, etc. You can also deploy your NextJS app through this web server giving you a secure front end for your app."}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"text","text":"Install NGINX"}]},{"type":"blockquote","content":[{"type":"paragraph","content":[{"type":"text","text":"apt update ; apt install nginx"}]}]},{"type":"paragraph","content":[{"type":"text","text":"its as simple as that on debian, once its installed you move onto configuring it, lets install letsencrypt next."}]},{"type":"blockquote","content":[{"type":"paragraph","content":[{"type":"text","text":"sudo apt install certbot python3-certbot-nginx"}]}]},{"type":"paragraph","content":[{"type":"text","text":"Next use this script to activate your domain with nginx and letsencrypt. make sure your domain is pointing to the server with dns."}]},{"type":"codeBlock","attrs":{"language":null},"content":[{"type":"text","text":"#!/bin/bash\n# This script sets up an nginx server block for a given domain and secures it with Let’s Encrypt.\n# Usage: sudo ./setup_domain.sh yourdomain.com your-email@example.com\n\nset -e\n\nif [[ $EUID -ne 0 ]]; then\n echo \"This script must be run as root. Try using sudo.\" >&2\n exit 1\nfi\n\nif [ \"$#\" -ne 2 ]; then\n echo \"Usage: $0 domain.com your-email@example.com\"\n exit 1\nfi\n\nDOMAIN=$1\nEMAIL=$2\n\n# Variables for paths\nWEBROOT=\"/var/www/${DOMAIN}/html\"\nNGINX_CONF=\"/etc/nginx/sites-available/${DOMAIN}\"\n\necho \"Creating document root at ${WEBROOT}...\"\nmkdir -p \"${WEBROOT}\"\nchown -R $USER:$USER \"${WEBROOT}\"\n\n# Create a sample index.html\ncat > \"${WEBROOT}/index.html\" <\n\n\n Welcome to ${DOMAIN}!\n\n\n

Success! The ${DOMAIN} server block is working!

\n\n\nEOF\n\necho \"Creating nginx configuration for ${DOMAIN}...\"\ncat > \"${NGINX_CONF}\" <