mreho/nginx repository overview

⁠NGINX

⁠Overview

This repository provides a secure, minimal, and continuously updated NGINX Docker image, designed for production-grade containerized environments.

⁠Security First

• Unprivileged NGINX: NGINX runs as a non-root user.
• Custom UID/GID: The nginx user uses UID 20000 / GID 20000 (instead of the default 101), making it safer and easier to integrate with hardened hosts, Kubernetes clusters, and shared volume setups.
• Daily rebuilds ensure the latest Alpine security patches are always included.

⁠Build Strategy

• Architecture: linux/amd64 only
• Base image: Alpine Linux
• Source: Official NGINX Mainline release binaries

⁠Available Tags

Images are built and published using the following tagging scheme:

• alpine
• alpine<alpineVersion>
• <nginxVersion>-alpine
• <nginxVersion>-alpine<alpineVersion>

⁠Examples

• alpine
• alpine3.23
• 1.29.5-alpine
• 1.29.5-alpine3.23

This tagging strategy allows you to:

• Track latest Alpine updates
• Pin specific Alpine versions
• Pin specific NGINX + Alpine combinations for full reproducibility

⁠Use Cases

• Web Servers
• Reverse Proxies
• Load Balancers
• Kubernetes & Docker Swarm deployments
• Security-conscious environments requiring non-root containers

⁠Why This Image?

• Daily rebuilt with CVE patches
• Non-root by default
• Clean and minimal Alpine base
• Explicit version pinning support