Nginx + quic + ModSecurity + Lua + etc.
10K+
GHA build v4.0/dev
4 September 2023
ModSecurity-nginx v1.0.3 (rules loaded inline/local/remote: 0/825/0)
OpenSSL 3.2.0-dev (Library: OpenSSL 3.2.0-dev )
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DZLIB -DNDEBUG
OPENSSLDIR: "/usr/local/ssl"
ENGINESDIR: "/usr/local/ssl/lib64/engines-3"
MODULESDIR: "/usr/local/ssl/lib64/ossl-modules"
Seeding source: os-specific
CPUINFO: OPENSSL_ia32cap=0xfff83203078bffff:0x209c01ab
Providers:
default
name: OpenSSL Default Provider
version: 3.2.0
status: active
curl 8.3.0-DEV (x86_64-pc-linux-gnu) libcurl/8.3.0-DEV BoringSSL brotli/1.0.9 quiche/0.18.0
Protocols: dict file ftp ftps gopher gophers http https imap imaps mqtt pop3 pop3s rtsp smb smbs smtp smtps telnet tftp
Features: alt-svc AsynchDNS brotli HSTS HTTP3 HTTPS-proxy IPv6 Largefile NTLM NTLM_WB SSL threadsafe UnixSockets
0.8.1
nginx version: nginx/1.25.2 (quic-boringssl)
built with OpenSSL 1.1.1 (compatible; BoringSSL) (running with BoringSSL)
TLS SNI support enabled
configure arguments:
--http-client-body-temp-path=/tmp/nginx/client-body-temp
--http-proxy-temp-path=/tmp/nginx/proxy-temp
--http-fastcgi-temp-path=/tmp/nginx/fastcgi-temp
--http-uwsgi-temp-path=/tmp/nginx/uwsgi-temp
--http-scgi-temp-path=/tmp/nginx/scgi-temp
--with-http_xslt_module
--with-http_ssl_module
--with-http_mp4_module
--with-http_flv_module
--with-http_secure_link_module
--with-http_dav_module
--with-http_auth_request_module
--with-compat
--with-http_geoip_module
--with-http_image_filter_module
--with-mail
--with-mail_ssl_module
--with-google_perftools_module
--with-debug
--with-pcre-jit
--without-pcre2
--with-ipv6
--with-http_stub_status_module
--with-http_realip_module
--with-http_addition_module
--with-http_gzip_static_module
--with-http_sub_module
--with-stream
--with-stream_geoip_module
--with-stream_realip_module
--with-stream_ssl_module
--with-stream_ssl_preread_module
--with-http_random_index_module
--with-http_gunzip_module
--with-http_v2_module
--with-http_slice_module
--add-module=/usr/src/nginx_upstream_check_module
--add-module=/usr/src/nginx-rtmp-module
--add-module=/usr/src/ngx_devel_kit
--add-module=/usr/src/lua-nginx-module
--add-module=/usr/src/echo-nginx-module
--add-module=/usr/src/nginx-ts-module
--add-module=/usr/src/nginx-module-vts
--add-module=/usr/src/nginx-module-stream-sts
--add-module=/usr/src/nginx-module-sts
--add-module=/usr/src/nginx-vod-module
--add-module=/usr/src/njs/nginx
--add-module=/usr/src/ModSecurity-nginx
--add-module=/usr/src/headers-more-nginx-module
--add-module=/usr/src/lua-upstream-nginx-module
--add-module=/usr/src/status-nginx-module
--add-module=/usr/src/ngx_brotli
--add-module=/usr/src/set-misc-nginx-module
--add-module=/usr/src/ngx_http_proxy_connect_module
--with-cc-opt=-I/usr/src/boringssl/include
--with-ld-opt='-L/usr/src/boringssl/build/ssl -L/usr/src/boringssl/build/crypto'
--build=quic-boringssl
--with-http_v3_module
nginx version: nginx/1.25.2 (quictls)
built with OpenSSL 3.0.10+quic 1 Aug 2023
TLS SNI support enabled
configure arguments:
--http-client-body-temp-path=/tmp/nginx/client-body-temp
--http-proxy-temp-path=/tmp/nginx/proxy-temp
--http-fastcgi-temp-path=/tmp/nginx/fastcgi-temp
--http-uwsgi-temp-path=/tmp/nginx/uwsgi-temp
--http-scgi-temp-path=/tmp/nginx/scgi-temp
--with-http_xslt_module
--with-http_ssl_module
--with-http_mp4_module
--with-http_flv_module
--with-http_secure_link_module
--with-http_dav_module
--with-http_auth_request_module
--with-compat
--with-http_geoip_module
--with-http_image_filter_module
--with-mail
--with-mail_ssl_module
--with-google_perftools_module
--with-debug
--with-pcre-jit
--without-pcre2
--with-ipv6
--with-http_stub_status_module
--with-http_realip_module
--with-http_addition_module
--with-http_gzip_static_module
--with-http_sub_module
--with-stream
--with-stream_geoip_module
--with-stream_realip_module
--with-stream_ssl_module
--with-stream_ssl_preread_module
--with-http_random_index_module
--with-http_gunzip_module
--with-http_v2_module
--with-http_slice_module
--add-module=/usr/src/nginx_upstream_check_module
--add-module=/usr/src/nginx-rtmp-module
--add-module=/usr/src/ngx_devel_kit
--add-module=/usr/src/lua-nginx-module
--add-module=/usr/src/echo-nginx-module
--add-module=/usr/src/nginx-ts-module
--add-module=/usr/src/nginx-module-vts
--add-module=/usr/src/nginx-module-stream-sts
--add-module=/usr/src/nginx-module-sts
--add-module=/usr/src/nginx-vod-module
--add-module=/usr/src/njs/nginx
--add-module=/usr/src/ModSecurity-nginx
--add-module=/usr/src/headers-more-nginx-module
--add-module=/usr/src/lua-upstream-nginx-module
--add-module=/usr/src/status-nginx-module
--add-module=/usr/src/ngx_brotli
--add-module=/usr/src/set-misc-nginx-module
--add-module=/usr/src/ngx_http_proxy_connect_module
--with-cc-opt=-I/usr/src/ssl/include
--with-ld-opt=-L/usr/src/ssl/lib
--with-openssl=/usr/src/openssl
--build=quictls
--with-http_v3_module
Ubuntu 22.04.3 LTS (Jammy Jellyfish)
from 6 September 2023 https://mailfud.org/geoip-legacy/
sudo docker run \
-d \
--rm \
--name nginx-aio \
-p 80:80/tcp \
-p 443:443/tcp \
-p 443:443/udp \
-v /opt/nginx/nginx.conf:/usr/local/nginx/conf/nginx.conf \
-v /etc/letsencrypt/live/server_name/fullchain.pem:/usr/local/nginx/conf/ssl/server_name/fullchain.pem:ro \
-v /etc/letsencrypt/live/server_name/privkey.pem:/usr/local/nginx/conf/ssl/server_name/privkey.pem:ro \
dburianov/nginx-aio:buildx-latest
tag=$(date +%Y%m%d%H%M)
sudo docker buildx build --push \
--platform linux/amd64,linux/arm64/v8 \
--tag nginx-aio:buildx-latest \
--tag nginx-aio:buildx-$tag \
.
tag=$(date +%Y%m%d%H%M)
sudo docker buildx build --push \
--platform linux/amd64,linux/arm64/v8 \
--tag nginx-aio:buildx-latest \
--tag nginx-aio:buildx-$tag \
-f Dockerfile.quictls \
.
Content type
Image
Digest
sha256:1f1e95452…
Size
120 MB
Last updated
over 1 year ago
docker pull dburianov/nginx-aio