desertbit/nginx repository overview

⁠Nginx Docker Image

Deploy Nginx with some useful presets available. A strong DHE parameter is also generated automatically during the first startup.

⁠Presets

All available presets are located in the /etc/nginx/includes directory.

• /etc/nginx/includes/ssl: Important SSL rules as HTTPS server optimization, Forward Secrecy, HTTP Strict Transport Security,...
• /etc/nginx/includes/ssl_stapling: OCSP Stapling
• /etc/nginx/includes/block: Block some unwanted visitors

server {
  listen 443 ssl;

  ...

  ssl on;
  ssl_certificate ...;
  ssl_certificate_key ...;

  # Include presets
  include /etc/nginx/includes/ssl;
  include /etc/nginx/includes/ssl_stapling;
  include /etc/nginx/includes/block;
}

⁠SSL Support

The SSL cipher configuration is based on mozillas recommendation⁠ which should provide compatibility with clients back to Firefox 1, Chrome 1, IE 7, Opera 5, Safari 1, Windows XP IE8, Android 2.3, Java 7.

⁠Volumes

• /etc/nginx/conf.d: Virtual host directory
• /etc/nginx/certs: Directory to place certificates
• /var/log/nginx: Nginx logs

⁠TURTLE

There is a Turtlefile available to setup and run Nginx in one shot. Check the Turtle documentation for more information.

⁠Systemd service

[Unit]
Description=Dockerized Nginx
After=docker.service
Requires=docker.service

[Service]
TimeoutStartSec=0
Restart=always
ExecStartPre=-/usr/bin/docker kill nginx
ExecStartPre=-/usr/bin/docker rm nginx
ExecStartPre=/usr/bin/docker pull desertbit/nginx
ExecStart=/usr/bin/docker run --name=nginx \
  -p 80:80 -p 443:443 \
  -v /some/path/conf.d:/etc/nginx/conf.d:ro \
  -v /some/path/certs:/etc/nginx/certs:ro \
  -v /some/path/log:/var/log/nginx \
  desertbit/nginx

[Install]
Alias=nginx.service
WantedBy=multi-user.target

Mount the /etc/nginx/certs in read-write mode during the first startup. Otherwise the automatic DHE parameter generation will fail.