| :--- | :--- | :---: |

| [Define the listen directives with address:port pair](doc/RULES.md#beginner-define-the-listen-directives-with-addressport-pair)<br>^{Prevents soft mistakes which may be difficult to debug.} | Base Rules |  |

| [Prevent processing requests with undefined server names](doc/RULES.md#beginner-prevent-processing-requests-with-undefined-server-names)<br>^{It protects against configuration errors, e.g. traffic forwarding to incorrect backends.} | Base Rules |  |

| [Set the HTTP headers with add_header and proxy_*_header directives properly](doc/RULES.md#beginner-set-the-http-headers-with-add_header-and-proxy__header-directives-properly)<br>^{Set the right security headers for all contexts.} | Base Rules |  |

| [Configure log rotation policy](doc/RULES.md#beginner-configure-log-rotation-policy)<br>^{Save yourself trouble with your web server: configure appropriate logging policy.} | Base Rules |  |

| [Use simple custom error pages](doc/RULES.md#beginner-use-simple-custom-error-pages)<br>^{Default error pages reveals information which leads to information leakage vulnerability.} | Base Rules |  |