How do you secure your nginx sites?

Question

Nginx

I would like to hear opinions on how to protect your sites from unwanted attacks, shell uploads, and more.
There is a server on CentOS 7 running Nginx, php7.1, MariaDB (I use adminer ).
Engines will be used such as bitrix, wp, modx and php frameworks are different.
I'm more interested in writing secure nginx configs.
Thank you.

Answer 1

Opinion: send traffic through CloudFlare - they can filter some of the threats.
Other threats and security holes exist at the level of PHP and engines and are almost not filtered by the web server. You can analyze the logs for typical patterns, say, fail2ban 'om.

Answer 2

https://github.com/nbs-system/naxsi

Answer 3

https://configserver.com/cp/csf.html