[rwth-security] Nginx hardening checkliste