nginx

→ csp

• Hide csp
• proxy_hide_header
• CSP list and description
• how to find csp)

→ sso

• vouch
• oidc example
• vounch is based on auth_request nginx module
• partial basic auth

→ monitoring

• prometheus exporter + grafana dash

→ Rate limiting

Utilize the rate-limiting module to limit the rate of requests:
http {  limit_req_zone $binary_remote_addr  zone=limitbyaddr:10m rate=3r/s;
 limit_req_status 429;
 # ...
 server {  # ...
 limit_req zone=limitbyaddr;
 # ...
 } 
 }

→ Rewrite redirection

The proxy_redirect instruction allows to rewrite the proxied redirection.

This only works for http redirection (not html or javascript one)

→ Rewrite proxied html content

The sub_filter instruction allows to rewrite the html content