Your post will be published after a quick review.
Some wp plugins require ini files config like user.ini or php.ini - these file should be excluded from world access in nginx. For now, I have to include this custom config on every website I create.
Include below location config into all default sites as basic security measure:
location ~ .ini$ {
return 444;
}
1 week ago