Thinhnam.net Configuration ✯ 〈REAL〉

# Logs access_log /var/log/nginx/thinhnam.net_access.log; error_log /var/log/nginx/thinhnam.net_error.log;

server listen 80; listen [::]:80; server_name thinhnam.net www.thinhnam.net; return 301 https://$server_name$request_uri;

ErrorLog $APACHE_LOG_DIR/thinhnam_error.log CustomLog $APACHE_LOG_DIR/thinhnam_access.log combined </VirtualHost> Obtain a free Let’s Encrypt certificate: Thinhnam.net Configuration

location / try_files $uri $uri/ =404;

# Security Headers add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Content-Type-Options "nosniff" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always; # Logs access_log /var/log/nginx/thinhnam

sudo apt install postfix dovecot-core dovecot-imapd dovecot-pop3d

# SSL (see Section 4) ssl_certificate /etc/ssl/certs/thinhnam.net/fullchain.pem; ssl_certificate_key /etc/ssl/private/thinhnam.net/privkey.pem; # Logs access_log /var/log/nginx/thinhnam.net_access.log

| Record Type | Name/Host | Value/Target | TTL (Recommended) | |-------------|-----------|--------------|-------------------| | | @ (root) | YOUR_SERVER_IPv4 | 300-3600 | | AAAA | @ (root) | YOUR_SERVER_IPv6 (if available) | 300-3600 | | A | www | YOUR_SERVER_IPv4 | 300-3600 | | CNAME | * (wildcard, optional) | thinhnam.net | 3600 | | TXT | @ | v=spf1 mx ~all (basic SPF) | 3600 | | TXT | _dmarc | v=DMARC1; p=none; rua=mailto:dmarc@thinhnam.net | 3600 |