doublecompile/nginx-h5bp repository overview

⁠Nginx + H5BP Server Configs

A container image based on Nginx⁠:

…that also includes the H5BP Server Configs project⁠:

At this time, all images contain version 5.0.1 of the H5BP Server Configs.

⁠Versions and Tags Available

docker pull doublecompile/nginx-h5bp:latest

We create images for both branches of Nginx (i.e. stable and mainline) as well as all variants:

• alpine
• alpine/otel
• alpine/perl
• alpine/slim
• debian
• debian/otel
• debian/perl

You can use any version tag that works for the nginx image itself. Here are a few examples:

• 1.29-trixie
• stable-alpine
• 1-alpine-otel
• 1.29.1-alpine3.22-slim
• mainline-alpine-perl
• bookworm-perl

Supported Architectures: linux/amd64 and linux/arm64.

⁠Configuration

Add your site configuration in /etc/nginx/conf.d. You can use the files in /etc/nginx/conf.d/templates as examples.

The H5BP Server Configs project ships with configuration for the default server to turn away requests for unknown hosts. If you'd like to use this behavior, delete the default.conf file and then remove the leading dot in the filename for both .default.conf and .no-ssl.default.conf.

⁠TLS

The h5bp/tls/certificate_files.conf configuration file assumes your TLS certificates are located at /etc/nginx/certs/default.crt and /etc/nginx/certs/default.key. You can mount your certificates in this location.

If you use the Debian-based images, you can leverage the "snakeoil" certificates if untrusted certificates are acceptable for your use case.

apt-get update
apt-get install -y --no-install-recommends ssl-cert
mkdir -p /etc/nginx/certs
ln -s /etc/ssl/certs/ssl-cert-snakeoil.pem /etc/nginx/certs/default.crt
ln -s /etc/ssl/private/ssl-cert-snakeoil.key /etc/nginx/certs/default.key