Sign inSign up

dburianov/nginx-aio

By dburianov

•Updated over 1 year ago

Nginx + quic + ModSecurity + Lua + etc.

Image
Web servers
0

10K+

dburianov/nginx-aio repository overview

pipeline statuscoverage reportLatest Release

⁠Custom Nginx build with static modules

⁠ModSecurity rules

GHA build v4.0/dev
4 September 2023

⁠ModSecurity

ModSecurity-nginx v1.0.3 (rules loaded inline/local/remote: 0/825/0)

⁠OpenSSL

OpenSSL 3.2.0-dev  (Library: OpenSSL 3.2.0-dev )
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DZLIB -DNDEBUG
OPENSSLDIR: "/usr/local/ssl"
ENGINESDIR: "/usr/local/ssl/lib64/engines-3"
MODULESDIR: "/usr/local/ssl/lib64/ossl-modules"
Seeding source: os-specific
CPUINFO: OPENSSL_ia32cap=0xfff83203078bffff:0x209c01ab
Providers:
  default
    name: OpenSSL Default Provider
    version: 3.2.0
    status: active

⁠cURL

curl 8.3.0-DEV (x86_64-pc-linux-gnu) libcurl/8.3.0-DEV BoringSSL brotli/1.0.9 quiche/0.18.0
Protocols: dict file ftp ftps gopher gophers http https imap imaps mqtt pop3 pop3s rtsp smb smbs smtp smtps telnet tftp
Features: alt-svc AsynchDNS brotli HSTS HTTP3 HTTPS-proxy IPv6 Largefile NTLM NTLM_WB SSL threadsafe UnixSockets

⁠njs

0.8.1

⁠Nginx

⁠Nginx with BorringSSL, only linux/amd64
nginx version: nginx/1.25.2 (quic-boringssl)
built with OpenSSL 1.1.1 (compatible; BoringSSL) (running with BoringSSL)
TLS SNI support enabled
configure arguments:
  --http-client-body-temp-path=/tmp/nginx/client-body-temp
  --http-proxy-temp-path=/tmp/nginx/proxy-temp
  --http-fastcgi-temp-path=/tmp/nginx/fastcgi-temp
  --http-uwsgi-temp-path=/tmp/nginx/uwsgi-temp
  --http-scgi-temp-path=/tmp/nginx/scgi-temp
  --with-http_xslt_module
  --with-http_ssl_module
  --with-http_mp4_module
  --with-http_flv_module
  --with-http_secure_link_module
  --with-http_dav_module
  --with-http_auth_request_module
  --with-compat
  --with-http_geoip_module
  --with-http_image_filter_module
  --with-mail
  --with-mail_ssl_module
  --with-google_perftools_module
  --with-debug
  --with-pcre-jit
  --without-pcre2
  --with-ipv6
  --with-http_stub_status_module
  --with-http_realip_module
  --with-http_addition_module
  --with-http_gzip_static_module
  --with-http_sub_module
  --with-stream
  --with-stream_geoip_module
  --with-stream_realip_module
  --with-stream_ssl_module
  --with-stream_ssl_preread_module
  --with-http_random_index_module
  --with-http_gunzip_module
  --with-http_v2_module
  --with-http_slice_module
  --add-module=/usr/src/nginx_upstream_check_module
  --add-module=/usr/src/nginx-rtmp-module
  --add-module=/usr/src/ngx_devel_kit
  --add-module=/usr/src/lua-nginx-module
  --add-module=/usr/src/echo-nginx-module
  --add-module=/usr/src/nginx-ts-module
  --add-module=/usr/src/nginx-module-vts
  --add-module=/usr/src/nginx-module-stream-sts
  --add-module=/usr/src/nginx-module-sts
  --add-module=/usr/src/nginx-vod-module
  --add-module=/usr/src/njs/nginx
  --add-module=/usr/src/ModSecurity-nginx
  --add-module=/usr/src/headers-more-nginx-module
  --add-module=/usr/src/lua-upstream-nginx-module
  --add-module=/usr/src/status-nginx-module
  --add-module=/usr/src/ngx_brotli
  --add-module=/usr/src/set-misc-nginx-module
  --add-module=/usr/src/ngx_http_proxy_connect_module
  --with-cc-opt=-I/usr/src/boringssl/include
  --with-ld-opt='-L/usr/src/boringssl/build/ssl -L/usr/src/boringssl/build/crypto'
  --build=quic-boringssl
  --with-http_v3_module
⁠Nginx with QuickTLS, linux/amd64,linux/arm64/v8
nginx version: nginx/1.25.2 (quictls)
built with OpenSSL 3.0.10+quic 1 Aug 2023
TLS SNI support enabled
configure arguments:
  --http-client-body-temp-path=/tmp/nginx/client-body-temp
  --http-proxy-temp-path=/tmp/nginx/proxy-temp
  --http-fastcgi-temp-path=/tmp/nginx/fastcgi-temp
  --http-uwsgi-temp-path=/tmp/nginx/uwsgi-temp
  --http-scgi-temp-path=/tmp/nginx/scgi-temp
  --with-http_xslt_module
  --with-http_ssl_module
  --with-http_mp4_module
  --with-http_flv_module
  --with-http_secure_link_module
  --with-http_dav_module
  --with-http_auth_request_module
  --with-compat
  --with-http_geoip_module
  --with-http_image_filter_module
  --with-mail
  --with-mail_ssl_module
  --with-google_perftools_module
  --with-debug
  --with-pcre-jit
  --without-pcre2
  --with-ipv6
  --with-http_stub_status_module
  --with-http_realip_module
  --with-http_addition_module
  --with-http_gzip_static_module
  --with-http_sub_module
  --with-stream
  --with-stream_geoip_module
  --with-stream_realip_module
  --with-stream_ssl_module
  --with-stream_ssl_preread_module
  --with-http_random_index_module
  --with-http_gunzip_module
  --with-http_v2_module
  --with-http_slice_module
  --add-module=/usr/src/nginx_upstream_check_module
  --add-module=/usr/src/nginx-rtmp-module
  --add-module=/usr/src/ngx_devel_kit
  --add-module=/usr/src/lua-nginx-module
  --add-module=/usr/src/echo-nginx-module
  --add-module=/usr/src/nginx-ts-module
  --add-module=/usr/src/nginx-module-vts
  --add-module=/usr/src/nginx-module-stream-sts
  --add-module=/usr/src/nginx-module-sts
  --add-module=/usr/src/nginx-vod-module
  --add-module=/usr/src/njs/nginx
  --add-module=/usr/src/ModSecurity-nginx
  --add-module=/usr/src/headers-more-nginx-module
  --add-module=/usr/src/lua-upstream-nginx-module
  --add-module=/usr/src/status-nginx-module
  --add-module=/usr/src/ngx_brotli
  --add-module=/usr/src/set-misc-nginx-module
  --add-module=/usr/src/ngx_http_proxy_connect_module
  --with-cc-opt=-I/usr/src/ssl/include
  --with-ld-opt=-L/usr/src/ssl/lib
  --with-openssl=/usr/src/openssl
  --build=quictls
  --with-http_v3_module

⁠OS

Ubuntu 22.04.3 LTS (Jammy Jellyfish)

⁠GeoIP

from 6 September 2023 https://mailfud.org/geoip-legacy/

⁠Usage

sudo docker run \
  -d \
  --rm \
  --name nginx-aio \
  -p 80:80/tcp \
  -p 443:443/tcp \
  -p 443:443/udp \
  -v /opt/nginx/nginx.conf:/usr/local/nginx/conf/nginx.conf \
  -v /etc/letsencrypt/live/server_name/fullchain.pem:/usr/local/nginx/conf/ssl/server_name/fullchain.pem:ro \
  -v /etc/letsencrypt/live/server_name/privkey.pem:/usr/local/nginx/conf/ssl/server_name/privkey.pem:ro \
  dburianov/nginx-aio:buildx-latest

⁠Build

⁠nginx+borringssl
tag=$(date +%Y%m%d%H%M)
sudo docker buildx build --push \
  --platform linux/amd64,linux/arm64/v8 \
  --tag nginx-aio:buildx-latest \
  --tag nginx-aio:buildx-$tag \
  .
⁠nginx+borringssl
tag=$(date +%Y%m%d%H%M)
sudo docker buildx build --push \
  --platform linux/amd64,linux/arm64/v8 \
  --tag nginx-aio:buildx-latest \
  --tag nginx-aio:buildx-$tag \
  -f Dockerfile.quictls \
  .

Tag summary

Content type

Image

Digest

sha256:1f1e95452…

Size

120 MB

Last updated

over 1 year ago

docker pull dburianov/nginx-aio