Block IP range

Block a subnet and specific IP in nginx location/server block

deny 192.168.1.0/24;
deny 10.0.0.1;
allow all;

More nginx commands

Proxy WebSocket

location /ws/ { proxy_pass http://backend; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; }

WebSocket proxy with required Upgrade headers
Test configuration

nginx -t

Validate nginx.conf without reloading
Reload without downtime

nginx -s reload

Gracefully reload config — zero connection drop
Show compiled modules

nginx -V 2>&1 | tr ' ' '\n' | grep module

List all built-in and dynamic modules in the binary
Tail access log with fields

tail -f /var/log/nginx/access.log | awk '{print $1, $7, $9, $10}'

Stream IP, path, status code, and response size