Avoiding the top Nginx configuration mistakes
I've assigned this the Global Security Database (GSD) ID GSD-2022-1000285 (https://raw.globalsecuritydatabase.org/GSD-2022-1000285) and started a discussion about these informational entries at https://groups.google.com/a/groups.cloudsecurityalliance.org...TL;DR: if you run nginx I assume you want to know about these types of potential problems, so sticking it into the security database makes a lot of sense in my opinion for discoverability.