Mehmet YETER
TR

← Blog · Published:

Nginx reverse proxy in front of several WordPress servers

Diagram of a firewall, an Nginx reverse proxy and three WordPress servers
Diagram of a firewall, an Nginx reverse proxy and three WordPress servers

I route HTTP and HTTPS traffic for three WordPress servers in a DMZ through a single Nginx reverse proxy. TLS terminates at the proxy while the backends keep serving plain HTTP.

What the article covers

  1. Installing Nginx on Debian and disabling the default site
  2. A separate sites-available config per domain: listen on port 80, Host, real IP, X-Forwarded-For/Proto/Server headers and proxy_pass
  3. sites-enabled links and restarting Nginx
  4. Let's Encrypt certificates per domain with the Certbot Nginx plugin
  5. Verifying automatic renewal with a certbot dry run and the certbot.timer unit
  6. Separating the web DMZ from the server DMZ on a Palo Alto firewall, with destination NAT

Read the original article on LinkedIn ↗