Сергей Соколов

# не принимать POST вообще
location /nopost/ {
    limit_except  GET HEAD { deny   all; }
}

# не больше 1к данных постом
location /smallpost/ {
    client_max_body_size = 1k;
}

#   Ловит всех по http
server {
    listen 80;
    server_name    site.com  www.site.com;
    return 301 https://site.com$request_uri;
}

#   Только https, с лишним www.
server {
    listen 443 ssl;
    server_name    www.site.com;
    return 301  https://site.com$request_uri;
}

location ~/some_folder/secret.php$ {
  auth_basic            "Secret area";
  auth_basic_user_file  /home/users/.htpasswd;
  location ~* \.php {
    include /etc/nginx/fastcgi.conf;
    fastcgi_intercept_errors on;
    fastcgi_index  index.php;
    fastcgi_pass php;
  }
}