RU RU

All Posts

Embedding site-builder pages into your site via NGINX

2025-10-12

🌐 Embedding a Website Builder Page into Your Site via NGINX

Integrating a page created in an external website builder into your domain allows you to extend functionality and maintain a consistent interface style. This article explains how to use an NGINX reverse proxy to embed pages from an external service (for example, example.website-builder.com) into your site your-main-site.com at paths /path1/ and /path2/.


⚙️ How it works

NGINX forwards requests from your domain to the external site, acting as an intermediary between the user and the builder service.

119 | Beyond Let's Encrypt: Overview of the Best Free SSL/TLS Alternatives

2025-10-10

🌐 Beyond Let’s Encrypt: an overview of the best alternatives for SSL/TLS

Thanks to Let’s Encrypt HTTPS has become the standard for the entire internet. This project made it possible for any site administrator to get a free SSL certificate in just a few commands. But other players have appeared on the market, offering more convenience, integrations, and flexibility.

If you want to try something besides Let’s Encrypt — below is an overview of the most reliable and popular alternatives.

SSL certificates via DNS: automating Let’s Encrypt issuance

2025-10-06

SSL certificates via DNS: automating Let’s Encrypt issuance

Introduction

Let’s Encrypt is the standard for obtaining free TLS certificates. Most often certificates are issued via the HTTP-01 method, which requires a reachable web server on port 80. However, for internal services or wildcard certificates (for example, *.example.com) it is more convenient to use DNS-01, which verifies domain ownership via TXT records in DNS and does not require open ports.

This article covers:

107 | Battle for Security — FTPS vs SFTP

2025-09-24


Battle for Security — FTPS vs SFTP

Introduction

After we figured out insecure FTP, it’s time to meet its secure successors. Here’s where confusion often arises: many people think FTPS and SFTP are the same thing. In reality, these are two completely different protocols — with different histories and principles of operation.


What is FTPS? (FTP + Security)

FTPS (FTP over SSL/TLS) is a direct evolution of classic FTP. It takes standard FTP and “wraps” its connections in the cryptographic protocol SSL/TLS (the same one that protects websites via HTTPS).

102 | Caddy vs. Traefik vs. HAProxy vs. Nginx vs. Apache: Comparing Web Servers and Proxies

2025-09-06

Caddy vs. Traefik vs. HAProxy vs. Nginx vs. Apache

Introduction

Choosing a web server and reverse proxy today depends on tasks and infrastructure. Caddy, Traefik, HAProxy, Nginx, and Apache are five popular solutions, each with its strengths and weaknesses.

In this article, we’ll compare them by key criteria: philosophy, installation, SSL, CI/CD, and complexity.


Comparison by Key Criteria

CriterionCaddyTraefikHAProxyNginxApache
PhilosophySimplicity, automatic SSLDynamic routing and Service DiscoveryHigh-performance load balancerUniversal web server and proxyClassic web server, static approach
InstallationSingle binaryContainer, requires setupSingle binary, manual configurationOS package, easy installationOS package, easy installation
SSL AutomationBuilt-in, main advantageBuilt-in, part of ecosystemNo (requires external integration, e.g., certbot)Partial (via certbot or modules)Partial (via certbot or modules)
CI/CDVery easy integrationIdeal for microservicesUsed for high-load balancingRequires manual steps, integration possibleRequires manual steps, integration possible
ComplexityLow, beginner-friendlyMedium/high, requires orchestrator knowledgeMedium, more complex configsMedium, rich ecosystemMedium, often bloated configs
PerformanceGood, but not top-tierGoodExcellent, optimized for load balancingExcellentAverage
Best Use CaseLocal development, quick MVPsDocker/Kubernetes, microservicesHigh-load systems, load balancingUniversal choice for web and proxyStatic site hosting, legacy systems

Who Is It For?

🔹 Caddy

Ideal for:

100 | Caddy: A Web Server That Just Works and SSL Out of the Box

2025-09-04

Caddy: A Web Server That Just Works and SSL Out of the Box

Introduction

In a world where setting up a web server often requires studying complex configuration files, Caddy offers a radically different approach. It is a modern, multifunctional web server, reverse proxy, and certificate authority in one package.

Caddy was created with a single goal: to provide maximum simplicity. If you are tired of the redundancy of Nginx or Apache, then Caddy is what you’re looking for. Its main “killer feature” is fully automatic SSL certificate management, making it an indispensable tool for developers.

Installing n8n on FastPanel with Docker Compose: A Clear Guide

2025-07-03

In this guide, I’ll show you how to easily install n8n, a powerful workflow automation tool, on your server with FastPanel using Docker Compose. FastPanel is great for managing web servers, and Docker Compose simplifies the deployment of complex applications like n8n with its dependencies (PostgreSQL and Redis).

What You’ll Need

  • Your server with FastPanel installed.
  • A domain or subdomain you’ll use to access n8n (e.g., n8n.yourdomain.com).
  • Basic knowledge of SSH and command line.

Step 1: Prepare the Server

Connect to your server via SSH and create a directory:

Installing n8n in Docker with HAProxy: A Clear Guide for Beginners

2025-07-02

Hi friends! Today, we’re diving into the world of automation and deploying n8n — a powerful workflow automation tool. We’ll install it in Docker, and use HAProxy as a reliable reverse proxy to expose it to the internet.

This guide is created especially for beginners. We’ll go step by step, explaining every command so you not only do it, but also understand how everything works.

Why do we even need HAProxy?

You could just expose n8n’s ports to the internet, right? Yes, but that’s unsafe and inconvenient. HAProxy acts as both a guard and a dispatcher:

Optimizing and Configuring Apache

0001-01-01

I will configure and optimize Apache for your projects.
I will enable support for SSL/TLS and HTTP/2.
I will configure mod_rpaf to correctly display real IPs when working through a proxy.
I will configure .htaccess for routing, redirects, and protection.
I will improve performance, loading speed, and the stability of the site.
I will audit the configuration and fix errors.