r/nginx

I've been using Nginx for a long time to reverse proxy a number of local servers.

Yesterday my Home Assistant server configuration stopped working while using the local FQDN with a 502 Bad Gateway. I changed to the IP in Nginx, and it started to work again.

I use Pihole for local DNS. Nginx, Pihole and HA are on Proxmox VMs.

I SSHed into the Nginx server. nslookup resolved the correct IP address for HA. I can ping both the FQDN and IP for HA from Nginx server. I tried Curl to both the FQDN and IP... and both work.

So, the Nginx server can see the home assistant server, but the reverse proxy only works using the IP address. I guess I'm ok with that as I don't expect to change the IP address any time soon, but why would this suddenly stop working?

I did change out my router and firewall (EdgrouterX to Unfi Gateway), but the server can still see the HA server. It seemed fine for a few days... and now it fails on the FQDN. Does Nginx use a different port/method for DNS than the underlying Linux server?

I'm trying to self-host a website. I got a domain from Porkbun (let's say its "my.domain"), and I am trying to figure out why I can't access my website from the internet. When I forward ports 443 and 80, I can access my website from my public ip address but not from the domain name.

Here's my nginx.conf:

 server {
                listen [::]:443 ssl ipv6only=on;
                listen 443 ssl;

                server_name my.domain;

                ssl_certificate /etc/letsencrypt/live/my.domain/fullchain.pem;
                ssl_certificate_key /etc/letsencrypt/live/my.domain/privkey.pem;

                location / {
                        proxy_pass http://localhost:8088;
                }
        }

        server {
                if ($host = my.domain) {        
                        return 301 https://$host$request_uri;
                }
                listen 80 default_server;
                listen [::]:80 default_server;

                server_name my.domain;
        }

Hola.

Armé un script que instala y compila un stack completo de Nginx con:

- QUIC / HTTP3

- ModSecurity + OWASP CRS

- Brotli

- GeoIP2

- Módulo no_more_headers

Probado en:

- Ubuntu 22.04

- Ubuntu 26.04

⏱️ Tiempo de instalación:

~8 minutos (10 threads @ 4.0GHz, 4GB RAM, SSD)

---

Lo interesante:

- Mantiene rutas estándar tipo apt (/etc/nginx, /usr/sbin/nginx, etc)

- Usa fuentes oficiales (nginx + módulos desde GitHub)

- Integra ModSecurity funcional con reglas OWASP listas

- Detecta/instala PHP automáticamente para FastCGI

- Selección de núcleos para compilar

- Certificado TLS autofirmado.

---

Limitaciones:

- Si quieres actualizar Nginx → requiere recompilar

- No es compatible con repos tipo ondrej/php

- No está pensado para producción sin revisión previa

- Limpieza manual con flag despues de instalar:

sudo ./ngx-shield.sh --cleanup

---

╭┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈┈ ↷
│ ┆ ✐; UPDATES DE SCRIPT
│
│ ┆ ✐; Se espera que a mitad de mayo/2026 se integre selector de módulos
│
│ ┆ ✐; Se integre update automático con pre autorización
╰───────────────────────────

También dejo screenshots:

Compilación e Instalación

Request bloqueado y HTTP 403

ngx-shield

Cualquier feedback es bienvenido.