What nginx configuration types can I generate?

You can generate four common server-block types: a static file server, a reverse proxy (for Node.js, Go, etc.), a PHP-FPM server (for WordPress and PHP apps), and a load balancer with multiple upstream backends. Each template includes the relevant location blocks and directives.

Does the generated config include SSL/TLS settings?

Yes. When SSL is enabled, the generator outputs a TLS 1.2/1.3 server block with modern cipher suites, OCSP stapling, session caching, HTTP/2, and optional HSTS. It also includes an HTTP-to-HTTPS redirect and a Let's Encrypt ACME challenge location with sensible default paths.

Is my configuration data sent to a server?

No. The entire generator runs in your browser. Your domain names, upstream URLs, and SSL paths are never uploaded — the config is built locally and only you see it. This makes the tool safe for internal hostnames and private infrastructure.

Can I customize the load balancing method?

Yes. For the load balancer type you can choose round-robin (the default), least-connected (least_conn), or IP-hash (ip_hash) for session stickiness. You can add as many backend servers as needed and the upstream block is generated automatically.

Nginx Config Generator

Generate production-ready nginx server-block configs for reverse proxy, SSL/TLS, PHP-FPM, load balancing, gzip, caching, and security headers. Let's Encrypt-ready. 100% client-side.

Loading tool...

What is Nginx Config Generator?

The Nginx Config Generator produces production-ready nginx server-block configurations for the most common deployment patterns: static file hosting, reverse proxying to an application server, PHP-FPM for PHP applications, and load balancing across multiple upstream backends. Configure your domain, endpoints, SSL/TLS certificates, gzip compression, static asset caching, and security headers through simple toggles, and the tool writes the full nginx.conf server block for you. Every directive is built client-side, so your hostnames and infrastructure details never leave your browser.

Key Benefits

Avoid hand-editing nginx syntax and the typos that cause reload failures and downtime
Four battle-tested templates cover static sites, reverse proxies, PHP-FPM, and load balancers
Modern SSL/TLS settings with TLS 1.2/1.3, OCSP stapling, HTTP/2, and optional HSTS
Security headers (X-Frame-Options, CSP, X-Content-Type-Options) generated automatically
100% client-side generation — no hostnames, upstream URLs, or cert paths are ever uploaded

Common Use Cases

•Standing up a reverse proxy in front of a Node.js, Go, or Python application server
•Configuring HTTPS for a WordPress site with PHP-FPM and Let's Encrypt certificates
•Distributing traffic across multiple backend instances with round-robin or least-conn balancing
•Adding gzip compression and cache headers to a static site or single-page app
•Quickly producing a secure baseline nginx config for a new domain or staging environment

How to Use the Nginx Config Generator

Choose a configuration type: Pick from Static Site, Reverse Proxy, PHP-FPM, or Load Balancer. The input fields update automatically based on your choice.
Fill in your domain and endpoints: Enter your server name (domain), the upstream URL or PHP-FPM socket, and for load balancers, add your backend servers.
Toggle SSL, gzip, caching, and security: Enable SSL/TLS with Let's Encrypt paths, gzip compression, static asset caching, and security headers as needed.
Copy or download the config: Review the generated config in the preview, then copy it to your clipboard or download it as a .conf file for your server.

Key Features

Four configuration templates: static site, reverse proxy, PHP-FPM, and load balancer
SSL/TLS with TLS 1.2/1.3, modern cipher suites, HTTP/2, and HSTS support
Gzip compression and long-lived static asset cache control out of the box
Security headers including X-Frame-Options, CSP, X-Content-Type-Options, and Referrer-Policy
Load balancing with round-robin, least-connections, and IP-hash upstream methods
Let's Encrypt ACME challenge location and WWW redirect generated automatically

Frequently Asked Questions

In-depth guide

Nginx Config Generator: Build Production-Ready Server Blocks in Seconds

Read the full guide →

Nginx Config Generator

Generate production-ready nginx server-block configs for reverse proxy, SSL/TLS, PHP-FPM, load balancing, gzip, caching, and security headers. Let's Encrypt-ready. 100% client-side.

Configuration Type

Basic Settings

Server Name (domain)

Listen Port

Proxy Pass (upstream URL)

SSL / TLS

Enable SSL/TLS (HTTPS)

SSL Certificate Path

SSL Private Key Path

HSTS (Strict-Transport-Security)

HTTP/2

Performance & Security

Generated nginx Configuration

# Gzip compression
gzip on;
gzip_vary on;
gzip_min_length 1024;
gzip_proxied any;
gzip_comp_level 6;
gzip_types text/plain text/css text/xml text/javascript
           application/javascript application/json
           application/xml application/rss+xml
           image/svg+xml application/x-font-ttf;

# Redirect www.example.com → example.com (HTTP → HTTPS)
server {
    listen 80;
    listen [::]:80;
    server_name example.com www.example.com;
    return 301 https://example.com$request_uri;
}

# Main server block
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name example.com;

    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
    ssl_prefer_server_ciphers off;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 1d;
    ssl_session_tickets off;
    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.8.8 8.8.4.4 valid=300s;
    resolver_timeout 5s;

    # Security headers
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header X-XSS-Protection "1; mode=block" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self';" always;

    # Logs
    access_log /var/log/nginx/example.com.access.log;
    error_log /var/log/nginx/example.com.error.log;

    location / {
      proxy_pass http://127.0.0.1:3000;
      proxy_http_version 1.1;
      proxy_set_header Host $host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_connect_timeout 60s;
      proxy_send_timeout 60s;
      proxy_read_timeout 60s;
    }

    # Static asset caching
    location ~* \.(jpg|jpeg|png|gif|ico|css|js|svg|woff|woff2|ttf|eot)$ {
      expires 1y;
      add_header Cache-Control "public, immutable";
      access_log off;
    }

    # Let's Encrypt ACME challenge
    location ^~ /.well-known/acme-challenge/ {
      default_type "text/plain";
      root /var/www/letsencrypt;
    }
}

About

The Nginx Config Generator creates production-ready nginx server-block configurations for common scenarios: static file hosting, reverse proxy, PHP-FPM, and load balancing. Configure SSL/TLS, gzip compression, caching, and security headers with a few toggles.

Why Use This Tool

• Avoid typos in nginx syntax that break production
• Best-practice security headers and SSL settings built in
• Supports 4 common deployment patterns out of the box
• Generates Let's Encrypt-ready SSL paths by default
• 100% client-side — no config data leaves your browser

Key Features

• 4 config types: static site, reverse proxy, PHP-FPM, load balancer
• SSL/TLS with modern cipher suites, HTTP/2, and HSTS support
• Gzip compression and static asset cache control
• Security headers: X-Frame-Options, CSP, X-Content-Type
• Load balancing with round-robin, least-conn, and ip-hash methods

Loading tool...

What is Nginx Config Generator?

Key Benefits

Avoid hand-editing nginx syntax and the typos that cause reload failures and downtime
Four battle-tested templates cover static sites, reverse proxies, PHP-FPM, and load balancers
Modern SSL/TLS settings with TLS 1.2/1.3, OCSP stapling, HTTP/2, and optional HSTS
Security headers (X-Frame-Options, CSP, X-Content-Type-Options) generated automatically
100% client-side generation — no hostnames, upstream URLs, or cert paths are ever uploaded

Common Use Cases

•Standing up a reverse proxy in front of a Node.js, Go, or Python application server
•Configuring HTTPS for a WordPress site with PHP-FPM and Let's Encrypt certificates
•Distributing traffic across multiple backend instances with round-robin or least-conn balancing
•Adding gzip compression and cache headers to a static site or single-page app
•Quickly producing a secure baseline nginx config for a new domain or staging environment

How to Use the Nginx Config Generator

Choose a configuration type: Pick from Static Site, Reverse Proxy, PHP-FPM, or Load Balancer. The input fields update automatically based on your choice.
Fill in your domain and endpoints: Enter your server name (domain), the upstream URL or PHP-FPM socket, and for load balancers, add your backend servers.
Toggle SSL, gzip, caching, and security: Enable SSL/TLS with Let's Encrypt paths, gzip compression, static asset caching, and security headers as needed.
Copy or download the config: Review the generated config in the preview, then copy it to your clipboard or download it as a .conf file for your server.

Key Features

Four configuration templates: static site, reverse proxy, PHP-FPM, and load balancer
SSL/TLS with TLS 1.2/1.3, modern cipher suites, HTTP/2, and HSTS support
Gzip compression and long-lived static asset cache control out of the box
Security headers including X-Frame-Options, CSP, X-Content-Type-Options, and Referrer-Policy
Load balancing with round-robin, least-connections, and IP-hash upstream methods
Let's Encrypt ACME challenge location and WWW redirect generated automatically

Frequently Asked Questions

In-depth guide

Nginx Config Generator: Build Production-Ready Server Blocks in Seconds

Read the full guide →

# Gzip compression gzip on; gzip_vary on; gzip_min_length 1024; gzip_proxied any; gzip_comp_level 6; gzip_types text/plain text/css text/xml text/javascript application/javascript application/json application/xml application/rss+xml image/svg+xml application/x-font-ttf; # Redirect www.example.com → example.com (HTTP → HTTPS) server { listen 80; listen [::]:80; server_name example.com www.example.com; return 301 https://example.com$request_uri; } # Main server block server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name example.com; ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256; ssl_prefer_server_ciphers off; ssl_session_cache shared:SSL:10m; ssl_session_timeout 1d; ssl_session_tickets off; ssl_stapling on; ssl_stapling_verify on; resolver 8.8.8.8 8.8.4.4 valid=300s; resolver_timeout 5s; # Security headers add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Content-Type-Options "nosniff" always; add_header X-XSS-Protection "1; mode=block" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always; add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self';" always; # Logs access_log /var/log/nginx/example.com.access.log; error_log /var/log/nginx/example.com.error.log; location / { proxy_pass http://127.0.0.1:3000; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_connect_timeout 60s; proxy_send_timeout 60s; proxy_read_timeout 60s; } # Static asset caching location ~* \.(jpg|jpeg|png|gif|ico|css|js|svg|woff|woff2|ttf|eot)$ { expires 1y; add_header Cache-Control "public, immutable"; access_log off; } # Let's Encrypt ACME challenge location ^~ /.well-known/acme-challenge/ { default_type "text/plain"; root /var/www/letsencrypt; } }

Nginx Config Generator

What is Nginx Config Generator?

Key Benefits

Common Use Cases

How to Use the Nginx Config Generator

Key Features

Frequently Asked Questions

Connection String Parser — แยกส่วน Connection String

SVG to JSX/TSX Converter

HTML to JSX/TSX Converter

JSON Formatter

Markdown Preview

Base64 Encoder/Decoder

Nginx Config Generator

What is Nginx Config Generator?

Key Benefits

Common Use Cases

How to Use the Nginx Config Generator

Key Features

Frequently Asked Questions

Connection String Parser — แยกส่วน Connection String

SVG to JSX/TSX Converter

HTML to JSX/TSX Converter

JSON Formatter

Markdown Preview

Base64 Encoder/Decoder