Protecting an Ubuntu 18.04+nginx+mysql+php server?

Question

PHP

So. Question in the header)
How to protect the server as much as possible?
How to protect each of the components?

Answer 1

While only your application is vulnerable, everything else is normal out of the box

Answer 2

Nemeseda waf + correct configuration of other components, using cloudflare

Answer 3

1. Nginx/anti-ddos
2. How to protect websites from hacking?

How to protect each of the components?

Permissions for users/processes/sockets, "sandbox", validation of all input data for each component through regex filters.
The MOST IMPORTANT: Replacement of all generators (sessions / random, etc.) and mat. constants to your own from your file.

Answer 4

Monitoring + maintenance by a specialist.