NGINX Reverse Proxy Hardening AI Skill Guide

Overview

This skill focuses on edge hardening for NGINX as a reverse proxy or ingress TLS terminator - not general static-site or PHP app cookbook material (see related nginx skill for broader NGINX usage). Hardening means enforcing modern TLS, security headers, rate limits, body size caps, careful proxy_* buffering, and denying abusive request patterns before they reach upstreams.

Internet clients
      |
      v
NGINX edge (TLS + rate limit + headers)
      |
      v
Upstream (app / API gateway / k8s service)

When to use