Skip to content

Latest commit

 

History

History
executable file
·
47 lines (33 loc) · 1.9 KB

README.md

File metadata and controls

executable file
·
47 lines (33 loc) · 1.9 KB
Raw

nginx built with LibreSSL

Features

  • Uses Alpine Linux as base
  • PCRE with JIT enabled
  • HTTP/2.0 (+NPN) support
  • Async I/O using threads support
  • Dynamic TLS records patch support (and configured) - From Cloudflare
  • Brotli compression support (and configured)
  • ModSecurity, enabled but in DetectionOnly mode by default

Currently the HPACK patch from Cloudflare is not used because it does not apply cleanly against mainline.

Usage

docker run --rm --name nginx -v ./htdocs:/var/www -p 80:80 -p 443:443 -d ajoergensen/nginx-libressl:tag

Available tags are stable and mainline

Environment

  • PUID: Change the uid of the user running nginx
  • PGID: Change the gid of the user running nginx
  • CHOWN_WWWDIR: Enable/disable the change of ownership of /var/www to $PUID:$PGID, defaults to TRUE. Note, if /var/www read only this variable will always be FALSE
  • WORKER_PROCESSES: Change the value of nginx worker_processes, defaults to auto.
  • MODSEC_MODE: Configure the ModSecurity rules engine. Values are On, Off, DetectionOnly. Default is DetectionOnly

Other

Though not defined as a volume, I recommend mapping a folder to /etc/nginx/conf.d to store your vhost definitions.

This image works great with docker-gen and docker-letsencrypt-nginx-proxy-companion (as a drop-in replacement for the nginx-proxy image)

Originally based on the official nginx Dockerfile & Wonderfall/boring-nginx - Forked from denji/nginx-libressl