epicmorg/nginx repository overview

⁠epicmorg/nginx

nginx built from the official nginx.org source tarballs with epicmorg/gcc:14⁠ against our own OpenSSL 3.5 (LTS) and libraries from trixie-develop, linked with a real RPATH, running on epicmorg/debian:trixie⁠. Every nginx branch also comes bundled with each PHP version.

⁠What's inside

Two kinds of tags per nginx branch:

nginx releases: 1.25.5, 1.26.3, 1.27.5, 1.28.3, 1.29.8, 1.30.6, 1.31.8. PHP in bundles: 5.3 ... 8.5.

Built in: threads, HTTP/2 and HTTP/3, SSL, stream (ssl, realip, preread, geoip), mail, realip, sub, gunzip, gzip_static, auth_request, secure_link, slice, dav, flv / mp4, image_filter, xslt, perl, geoip, stub_status, google perftools.

Dynamic modules (pinned versions, .so files in /etc/nginx/modules): njs (with QuickJS), lua + ndk (OpenResty, LuaJIT2 + lua-resty-core / lrucache), headers-more, echo, set-misc, xss, subs_filter, geoip2, ip2location, fancyindex, dav-ext, auth-pam, spnego (Kerberos), upload-progress, upstream-fair, upstream-check, nchan, rtmp, mod_zip, unzip, webp, user-agent.

Layout:

• binary and html in NGINX_DIR=/usr/local/share/epicmorg/nginx/<branch>; config in /etc/nginx
• nginx.conf includes /etc/nginx/modules-enabled/*.conf, conf.d/*.conf and sites-enabled/*
• cache /var/cache/nginx (a VOLUME), logs /var/log/nginx
• /etc/nginx/dhparam.pem -> the base image's 4096-bit /etc/ssl/dhparam.pem

⁠Tags

Every tag is pushed to docker.io, quay.io and ghcr.io (epicmorg/nginx:<tag> on each) - same digest everywhere.

⁠Usage

Plain nginx (ports 80, 443):

docker run -d -p 80:80 -p 443:443 \
  -v ./sites-enabled:/etc/nginx/sites-enabled:ro \
  epicmorg/nginx:1.29

Load a dynamic module by dropping a file into modules-enabled:

# /etc/nginx/modules-enabled/50-headers-more.conf
load_module /etc/nginx/modules/ngx_http_headers_more_filter_module.so;

nginx + PHP bundle (document root /var/www/html, HEALTHCHECK on http://127.0.0.1/php-fpm-ping covers nginx and php-fpm at once):

services:
  websites:
    image: epicmorg/nginx:1.29-php8.3
    restart: unless-stopped
    environment:
      - FIX_WWW_DATA=false   # true: chown -R www-data:www-data /var/www on start
    ports:
      - "80:80"
    volumes:
      - www:/var/www
      - ./sites-enabled:/etc/nginx/sites-enabled
    tmpfs:
      - /tmp
volumes:
  www:

Each bundle directory has its own README, e.g. 1.29/php8.3⁠.

⁠Links

• Source: EpicMorg/docker⁠ - issues and PRs welcome
• Tags float and are rebuilt weekly; pin by digest for reproducible builds: Tags, pinning and updates⁠
• CHANGELOG⁠ - License: MIT