Recommended Security Headers Settings for Nginx

Securing your web server is crucial to protect against various web vulnerabilities. Adding security headers to your Nginx configuration is one effective way to enhance security. Here are some recommended security headers and their settings:

  • Strict-Transport-Security (HSTS): Purpose: Enforces the use of HTTPS for the specified duration, protecting against man-in-the-middle attacks. Configuration:
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
[Read More]

What should you looking for in your next job as DevOps / Cloud Engineer?

There are several key aspects you should consider. Here are some important factors to look for: Culture and Collaboration: Seek a company that values collaboration, open communication, and teamwork. Look for an environment where DevOps principles are embraced, and there is a strong focus on breaking down silos between teams. Automation and Tooling: Ensure that the organization emphasizes the use of automation tools and technologies. Look for companies that have adopted industry-standard tools for tasks such as continuous integration, configuration management, deployment automation, and monitoring. [Read More]

Solving the problem on Failed to download metadata for repo 'appstream'

One new layer was added before run the yam update command:

RUN sed -i 's/mirrorlist/#mirrorlist/g' /etc/yum.repos.d/CentOS-Linux-* &&\
    sed -i 's|#baseurl=http://mirror.centos.org|baseurl=http://vault.centos.org|g' /etc/yum.repos.d/CentOS-Linux-*

RUN yum upgrade -y 

Openshift Template error unrecognized type int32

If you are running an Openshift template using Jenkins pipeline or another CI solution using the command line and you are getting this unrecognized error, I have a good new for you, perhaps your error is the same that I had before. For StatefulSet or DeploymentConfig, we must set in int value for replicas, example: replicas: 3, in this case, if your value came from parameter or from Jenkins environment variable. [Read More]

Checking status for Nginx

In this post, I will explain how we can get status for Nginx configuration, sometimes is not easy to filter the HTTP code by curl command when the backend is not working, besides that intention here is get the status of the proxy configuration.

[Read More]