Nginx hardening guide

  client_max_body_size 1k;

Use care with these suggestions. Some of them can break functionality in some sites. Read up on every option from nginx documentation site [1] before using any of them. The above will break any site that uses attachments or even lets users upload avatars or git commit over http. For SSL Cipher settings, please consider instead using the Mozilla SSL Configuration Generator [2] as options evolve with time and browser developers tend to keep up with this.

[1] - https://nginx.org/en/docs/

[2] - https://ssl-config.mozilla.org/