Remove rsyslog on VZ, if installed.
Nginx: Add NAXSI (Nginx Anti XSS & SQL Injection) WAF by default.