isabella232 / nginx-hardening

NGNIX and The Ninja Turtules

CIS Benchmark for NGINX Testing

This repository hosts the testing playground bootstraps and startup scripts to easily get up and running with an NGINX web server to contribute to testing the CIS benchmark for NGINX.

This repo does not entirely configuration for every security control, but it does contain the majority of them that do not require a strict customization. It is meant to create a simple baseline for people to start contributing early and often.

How to start contributing

Step 1. Create a virtual machine on the cloud provider of your choice.

Step 2. Open ports 80, 443 and 22 to your machine to your IP Address

Step 3. Run the Bootstrap script for either Centos 8 or Bionic Ubuntu. centosngnixbootstrap.sh may be used for Centos or Redhat and bionic_bootstrap may be used for Bionic.

Step 4. Start testing and contributing your ideas.