Webserver security (NGINX) preparing for Moodle 4.5

Thinking about how I might start to hack into a Moodle site and how I would defend against such an attack, my mind turned to the configuration of "hidden paths" on the server (in this case Nginx, but in a previous video I focused on Apache - see below). This configuration is a crucial step for securing your Moodle server as skipping it makes the job of an attacker much easier. In this video I explain a few of the more commonly overlooked security settings, why they're problematic and how to remedy them. In addition, I talk about an upcoming change in Moodle 4.5 and how to prepare for it so your Moodle stays secure even after the coming upgrades.
Checkout this previous version on the same topic where I focus more on Apache Webserver.
• Updating Moodle and Se...
Related video: Updates and upgrades
• Updates vs. Upgrades? ...
Documentation
NGINX
docs.moodle.or...
Apache
docs.moodle.or...

[@elsersergio]

161 / 5.000
Thank you very much for this great explanation 🙌🙌, so detailed and showing each point to resolve the alerts in the report. Thank you for your time, a valuable video. 🏆