Asif Bacchus
cbb8595380
refactor(NGINX): auto-load certificates
...
- use container-bound certificates by default
- do not use separate certificate loading include
2021-01-08 22:02:22 -07:00
Asif Bacchus
5132e6f2e2
fix(DOCKERFILE): terminate with SIGQUIT for NGINX
2021-01-07 13:34:09 -07:00
Asif Bacchus
00fcd6dd10
refactor(NGINX): move tmp paths to accessible locations for limited user
2021-01-07 13:31:04 -07:00
Asif Bacchus
d293e7b3e9
fix(DOCKERFILE): properly remove entrypoint script from parent container
2021-01-07 13:25:57 -07:00
Asif Bacchus
67e9a699d9
refactor(DOCKERFILE): change UID
2021-01-07 11:25:12 -07:00
Asif Bacchus
956acfc9a1
feature(DOCKERFILE): remove parent container entrypoint script
2021-01-07 11:07:49 -07:00
Asif Bacchus
2125dcb939
fix(DOCKERFILE): fix user creation, add home directory too
2021-01-07 10:45:40 -07:00
Asif Bacchus
0609c680e0
refactor(NGINX): update letsencrypt integration
...
- actually create letsencrypt challenge directory
- point default server-blocks to proper LE directory
- fix access and error logging for LE requests
- update server-block configuration comment headers
2021-01-07 10:16:24 -07:00
Asif Bacchus
4901116443
fix(DOCKERFILE): missing backslash in run cmd
2021-01-07 10:10:35 -07:00
Asif Bacchus
c08d3f1c37
chore(DOCKERFILE): bump internal version number
2021-01-07 10:09:43 -07:00
Asif Bacchus
715ae9cd38
feature(DOCKERFILE): set up nginx to run as non-root
...
- add libcap
- use setcap (via libcap) to allow nginx to bind to ports <1024
- set permissions on nginx directories
- change nginx pid location to /etc/nginx
2021-01-07 10:06:17 -07:00
Asif Bacchus
53ea4c9dc1
revert(DOCKERFILE): remove nano, update internal version
2021-01-07 08:58:08 -07:00
Asif Bacchus
609e1d3dd8
fix(NANO): update config option names
2021-01-07 07:22:54 -07:00
Asif Bacchus
394f1fdccd
fix(DOCKERFILE): fix errant reference to old user variable
2021-01-07 07:14:01 -07:00
Asif Bacchus
318e595bbd
refactor(SITES): rename default site block files
...
- remove test from filenames to avoid confusion
- these are production-capable files
2021-01-07 07:11:20 -07:00
Asif Bacchus
23da6ae576
docs(DOCKERFILE): fix username comment
2021-01-07 07:05:20 -07:00
Asif Bacchus
294c31d19e
feature(DOCKERFILE): run as limited user
...
- remove ability to specify username
- hardcode username to www-docker
- run as www-docker
2021-01-07 07:03:57 -07:00
Asif Bacchus
5f07c685ad
feature(DOCKERFILE): add nano, stop using git
...
- add nano and nano configuration file
- download and untar errorpages instead of installing git
2021-01-07 06:59:53 -07:00
Asif Bacchus
cffa79fe25
refactor(NGINX): remove settings from nginx.conf
...
- remove resolver
- remove proxy buffers
- these options should not be hardcoded, prevent conflicts
2021-01-07 05:19:17 -07:00
Asif Bacchus
ce95e94092
fix(SCRIPT): disable ssl configs without erroneous err msg
2021-01-06 12:44:40 -07:00
Asif Bacchus
c5ddc0f6e8
fix(SCRIPT): prevent erroneous error message
...
- port update should target secure block file regardless if disabled
2021-01-06 02:48:38 -07:00
Asif Bacchus
942a855ffa
refactor(SCRIPT): rework ssl implementation
...
- restart: prevent unnecessary error messages from already renamed files
2021-01-06 02:31:18 -07:00
Asif Bacchus
c683856959
fix(NGINX): fix healthcheck URL
2021-01-05 18:24:58 -07:00
Asif Bacchus
530b4ce476
refactor(LABELS): replace label schema with OCI
2021-01-05 18:01:53 -07:00
Asif Bacchus
f54bed8817
build(VERSION): align version with NGINX versions
...
- add separate label for internal version tracking
2021-01-05 17:36:04 -07:00
Asif Bacchus
e1bce5aaf6
feature(CONFIG): add healthcheck
2021-01-05 17:35:03 -07:00
Asif Bacchus
31bdf7b7f2
fix(CONFIG): change healthcheck port
2021-01-05 17:29:10 -07:00
Asif Bacchus
2301422842
fix(CONFIG): fix typo in sites note
2021-01-05 17:20:07 -07:00
Asif Bacchus
7cf92e7b2c
feature(NGINX): add health stub site
2021-01-05 17:18:24 -07:00
Asif Bacchus
ccc303f597
refactor(CONFIG): update SSL configurations
2021-01-05 17:12:00 -07:00
Asif Bacchus
2c1712700c
move version label for faster build, bump version
2020-03-10 23:20:54 -06:00
Asif Bacchus
d7f24405e1
make version explicitly 2.0
2019-11-18 05:04:08 -07:00
Asif Bacchus
f9d620cf08
fix stupid function return mistake
2019-11-18 05:00:39 -07:00
Asif Bacchus
096aecfeec
update proxy buffers to resolve access_log msg
2019-11-18 01:11:58 -07:00
Asif Bacchus
f0fc3364af
bump version number
2019-11-18 01:07:21 -07:00
Asif Bacchus
3ae78311f5
separate define and assign updated env vars
2019-11-18 00:56:28 -07:00
Asif Bacchus
f8d228b277
change access_log OFF to off
2019-11-17 23:55:54 -07:00
Asif Bacchus
61b0eb31d1
export case consistent env vars
2019-11-16 17:33:25 -07:00
Asif Bacchus
bbc9cb1508
env vars to ucase, params file case insensitive
2019-11-16 16:33:57 -07:00
Asif Bacchus
935ae0d150
add dedicated user for better permission control
2019-11-11 00:04:15 -07:00
Asif Bacchus
c9c4becf14
update permissions
2019-11-09 20:01:29 -07:00
Asif Bacchus
b14fe19ece
increase server names hash bucket size
2019-10-20 00:24:47 -06:00
Asif Bacchus
b83c4680da
increase server names hash bucket size
2019-10-19 23:43:55 -06:00
Asif Bacchus
cea18e853c
update cmd label
2019-10-18 02:07:14 -06:00
Asif Bacchus
868b29abc5
more console output cleanup
2019-10-18 02:01:47 -06:00
Asif Bacchus
d65e6ac266
minor version bump
2019-10-18 01:57:20 -06:00
Asif Bacchus
962177dda5
cleanup console output
2019-10-18 01:55:50 -06:00
Asif Bacchus
bfdb85b384
add option to turn on access log
2019-10-18 01:53:20 -06:00
Asif Bacchus
d6e49f4d09
add timezone to params, default UTC in container
2019-10-18 01:32:48 -06:00
Asif Bacchus
5b89659c0f
append newline to all configuration files
2019-10-18 00:35:02 -06:00