Full breakdown of hardening Nginx, PHP-FPM, and MySQL on Ubuntu — TLS configuration, security headers, file permissions, and what it actually takes to get an A+ on SSL Labs.