I propose blocking all access to Joomla's administrator login page and front-end user login (if you don't use it) because I constantly see a-hole bots in my logs trying to hack my site. Add these lines to the Nginx site configuration.# DENY ACCESS TO JOOMLA ADMIN location ~* /administrator.* { deny all; }# DENY ACCESS TO JOOMLA USER LOGIN location ~* /component/user.* { deny all; }
Now how do you access the Joomla administrator login page?? Serve your site on another port using a simpler configuration, then setup your firewall to only allow your IP to access that port.
Nginx - Blocking Access to Joomla Administrator and User Login
- Details