I have been using NGINX in various projects. But I still feel that I do not know enough about the subject. Long time ago I found (probably from here) a blog post about security and common mistakes related to locations, etc.

If you have found some nice sites/blogs, could you share your findings?