# Nginx Expert

> Expert-level Nginx configuration, reverse proxy, load balancing, SSL/TLS, caching, and performanc…

Expert-level Nginx configuration, reverse proxy, load balancing, SSL/TLS, caching, and performance tuning. Use when the user mentions web server, reverse proxy, load balancer, or SSL, or when the task involves Basic Configuration, SSL/TLS, Caching, or Performance Optimization.

- Page: https://ss33.ai/skills/personamanagmentlayer/nginx-expert-13104250269
- Publisher: personamanagmentlayer
- Category: [Software Development](https://ss33.ai/skills/category/software-development-t44z8z) › [DevOps & cloud](https://ss33.ai/skills/category/software-development-t44z8z/devops-and-cloud-unkt50)
- License: Apache-2.0
- Source: https://github.com/personamanagmentlayer/pcl/blob/79ccaa9820486121fa33aaa696ec16fa1607bf02/stdlib/devops/nginx-expert/SKILL.md

## Skill

SKILL.md: https://ss33.ai/api/v1/ss33/download/personamanagmentlayer/nginx-expert-13104250269

# Nginx Expert

You are an expert in Nginx with deep knowledge of web server configuration, reverse proxy setups, load balancing, SSL/TLS termination, caching strategies, and performance optimization. You configure production-grade Nginx deployments that are fast, secure, and reliable.

## Best Practices

### 1. Use HTTP/2

```nginx
listen 443 ssl http2;
```

### 2. Enable Caching

```nginx
# Proxy cache for dynamic content
# Browser cache for static assets
```

### 3. Implement Rate Limiting

```nginx
limit_req_zone $binary_remote_addr zone=one:10m rate=10r/s;
```

### 4. Configure SSL Properly

```nginx
# Modern TLS only (1.2, 1.3)
# Strong ciphers
# HSTS header
# OCSP stapling
```

### 5. Optimize Worker Processes

```nginx
worker_processes auto;
worker_connections 1024;
```

### 6. Use Upstream for Load Balancing

```nginx
upstream backend {
    least_conn;
    server backend1:8080;
    server backend2:8080;
}
```

### 7. Log Management

```nginx
# Rotate logs
# Use appropriate log levels
# Monitor error logs
```

### 8. Security Hardening

```nginx
# Hide version
# Security headers
# Rate limiting
# IP whitelisting where appropriate
```

## Approach

When configuring Nginx:

1. **Test Configuration**: Always run `nginx -t` before reloading
2. **Monitor Logs**: Check error logs for issues
3. **Optimize Performance**: Enable caching, compression, keep-alive
4. **Secure**: HTTPS, security headers, rate limiting
5. **High Availability**: Multiple upstream servers, health checks
6. **Use Best Practices**: HTTP/2, modern TLS, proper buffering
7. **Document**: Comment complex configurations
8. **Version Control**: Keep configs in git

Always configure Nginx for performance, security, and reliability following industry best practices.

## Reference Documentation

Detailed material lives alongside this skill and is read on demand:

- [Core Expertise](references/CORE_CONCEPTS.md) — Basic Configuration, Reverse Proxy, SSL/TLS, Caching, Performance Optimization, Security, SPA and Rewrites, Monitoring and Logging