Hardening Your WordPress Blog with HTTP Security Headers (Nginx)
Running a self-hosted WordPress blog on a VPS is great. You have full control over your stack, but that also means security hardening is entirely on you. A quick audit with Webbkoll revealed my site was missing several HTTP security headers that any production server should have. Here’s what I added, why, and exactly how. … Read more