you should disable direct hotlinking to /b/ threads and images without valid referer, i've seen some concern troll threats on /b/ like pic related threatening to contact amazon, this'll make it much harder for them
server {
...
location ^~ /b/res {
valid_referers blocked wizchan.org *.wizchan.org;
if ($invalid_referer) {
return 404;
}
}
location ^~ /b/src {
valid_referers blocked wizchan.org *.wizchan.org;
if ($invalid_referer) {
return 404;
}
}
location ^~ /b/thumb {
valid_referers blocked wizchan.org *.wizchan.org;
if ($invalid_referer) {
return 404;
}
}
}though i would go a step further and just disable hotlinking to all images on your site instead
server {
...
location ^~ /b/res {
valid_referers blocked wizchan.org *.wizchan.org;
if ($invalid_referer) {
return 404;
}
}
location ~ .(gif|jpe?g|mp4|png|webm|webp)$ {
valid_referers blocked wizchan.org *.wizchan.org;
if ($invalid_referer) {
return 404;
}
}
}you should disable access to the various vichan folders with php files. while "defined('TINYBOARD') or exit;" should be enough to prevent them from executing and show only blank white page, it's still good practice to prevent outside access anyway and not allow outsiders know their existence by showing 404 page.
server {
...
location ^~ /inc {
return 404;
}
location ^~ /templates {
return 404;
}
location ^~ /tools {
return 404;
}
location /tmp {
return 404;
}
location ^~ /vendor {
return 404;
}
}should hide your nginx server version and linux distro, i can see it in the response header. add "server_tokens off;" to your http block in /etc/nginx/nginx.conf :
https://www.tecmint.com/hide-nginx-server-version-in-linux/sudo ng
Post too long. Click here to view the full text.