Commit Graph

80 Commits

Author SHA1 Message Date
Asif Bacchus cbb8595380 refactor(NGINX): auto-load certificates
- use container-bound certificates by default
- do not use separate certificate loading include
2021-01-08 22:02:22 -07:00
Asif Bacchus 5132e6f2e2 fix(DOCKERFILE): terminate with SIGQUIT for NGINX 2021-01-07 13:34:09 -07:00
Asif Bacchus 00fcd6dd10 refactor(NGINX): move tmp paths to accessible locations for limited user 2021-01-07 13:31:04 -07:00
Asif Bacchus d293e7b3e9 fix(DOCKERFILE): properly remove entrypoint script from parent container 2021-01-07 13:25:57 -07:00
Asif Bacchus 67e9a699d9 refactor(DOCKERFILE): change UID 2021-01-07 11:25:12 -07:00
Asif Bacchus 956acfc9a1 feature(DOCKERFILE): remove parent container entrypoint script 2021-01-07 11:07:49 -07:00
Asif Bacchus 2125dcb939 fix(DOCKERFILE): fix user creation, add home directory too 2021-01-07 10:45:40 -07:00
Asif Bacchus 0609c680e0 refactor(NGINX): update letsencrypt integration
- actually create letsencrypt challenge directory
- point default server-blocks to proper LE directory
- fix access and error logging for LE requests
- update server-block configuration comment headers
2021-01-07 10:16:24 -07:00
Asif Bacchus 4901116443 fix(DOCKERFILE): missing backslash in run cmd 2021-01-07 10:10:35 -07:00
Asif Bacchus c08d3f1c37 chore(DOCKERFILE): bump internal version number 2021-01-07 10:09:43 -07:00
Asif Bacchus 715ae9cd38 feature(DOCKERFILE): set up nginx to run as non-root
- add libcap
- use setcap (via libcap) to allow nginx to bind to ports <1024
- set permissions on nginx directories
- change nginx pid location to /etc/nginx
2021-01-07 10:06:17 -07:00
Asif Bacchus 53ea4c9dc1 revert(DOCKERFILE): remove nano, update internal version 2021-01-07 08:58:08 -07:00
Asif Bacchus 609e1d3dd8 fix(NANO): update config option names 2021-01-07 07:22:54 -07:00
Asif Bacchus 394f1fdccd fix(DOCKERFILE): fix errant reference to old user variable 2021-01-07 07:14:01 -07:00
Asif Bacchus 318e595bbd refactor(SITES): rename default site block files
- remove test from filenames to avoid confusion
- these are production-capable files
2021-01-07 07:11:20 -07:00
Asif Bacchus 23da6ae576 docs(DOCKERFILE): fix username comment 2021-01-07 07:05:20 -07:00
Asif Bacchus 294c31d19e feature(DOCKERFILE): run as limited user
- remove ability to specify username
- hardcode username to www-docker
- run as www-docker
2021-01-07 07:03:57 -07:00
Asif Bacchus 5f07c685ad feature(DOCKERFILE): add nano, stop using git
- add nano and nano configuration file
- download and untar errorpages instead of installing git
2021-01-07 06:59:53 -07:00
Asif Bacchus cffa79fe25 refactor(NGINX): remove settings from nginx.conf
- remove resolver
- remove proxy buffers
- these options should not be hardcoded, prevent conflicts
2021-01-07 05:19:17 -07:00
Asif Bacchus ce95e94092 fix(SCRIPT): disable ssl configs without erroneous err msg 2021-01-06 12:44:40 -07:00
Asif Bacchus c5ddc0f6e8 fix(SCRIPT): prevent erroneous error message
- port update should target secure block file regardless if disabled
2021-01-06 02:48:38 -07:00
Asif Bacchus 942a855ffa refactor(SCRIPT): rework ssl implementation
- restart: prevent unnecessary error messages from already renamed files
2021-01-06 02:31:18 -07:00
Asif Bacchus c683856959 fix(NGINX): fix healthcheck URL 2021-01-05 18:24:58 -07:00
Asif Bacchus 530b4ce476 refactor(LABELS): replace label schema with OCI 2021-01-05 18:01:53 -07:00
Asif Bacchus f54bed8817 build(VERSION): align version with NGINX versions
- add separate label for internal version tracking
2021-01-05 17:36:04 -07:00
Asif Bacchus e1bce5aaf6 feature(CONFIG): add healthcheck 2021-01-05 17:35:03 -07:00
Asif Bacchus 31bdf7b7f2 fix(CONFIG): change healthcheck port 2021-01-05 17:29:10 -07:00
Asif Bacchus 2301422842 fix(CONFIG): fix typo in sites note 2021-01-05 17:20:07 -07:00
Asif Bacchus 7cf92e7b2c feature(NGINX): add health stub site 2021-01-05 17:18:24 -07:00
Asif Bacchus ccc303f597 refactor(CONFIG): update SSL configurations 2021-01-05 17:12:00 -07:00
Asif Bacchus 2c1712700c move version label for faster build, bump version 2020-03-10 23:20:54 -06:00
Asif Bacchus d7f24405e1 make version explicitly 2.0 2019-11-18 05:04:08 -07:00
Asif Bacchus f9d620cf08 fix stupid function return mistake 2019-11-18 05:00:39 -07:00
Asif Bacchus 096aecfeec update proxy buffers to resolve access_log msg 2019-11-18 01:11:58 -07:00
Asif Bacchus f0fc3364af bump version number 2019-11-18 01:07:21 -07:00
Asif Bacchus 3ae78311f5 separate define and assign updated env vars 2019-11-18 00:56:28 -07:00
Asif Bacchus f8d228b277 change access_log OFF to off 2019-11-17 23:55:54 -07:00
Asif Bacchus 61b0eb31d1 export case consistent env vars 2019-11-16 17:33:25 -07:00
Asif Bacchus bbc9cb1508 env vars to ucase, params file case insensitive 2019-11-16 16:33:57 -07:00
Asif Bacchus 935ae0d150 add dedicated user for better permission control 2019-11-11 00:04:15 -07:00
Asif Bacchus c9c4becf14 update permissions 2019-11-09 20:01:29 -07:00
Asif Bacchus b14fe19ece increase server names hash bucket size 2019-10-20 00:24:47 -06:00
Asif Bacchus b83c4680da increase server names hash bucket size 2019-10-19 23:43:55 -06:00
Asif Bacchus cea18e853c update cmd label 2019-10-18 02:07:14 -06:00
Asif Bacchus 868b29abc5 more console output cleanup 2019-10-18 02:01:47 -06:00
Asif Bacchus d65e6ac266 minor version bump 2019-10-18 01:57:20 -06:00
Asif Bacchus 962177dda5 cleanup console output 2019-10-18 01:55:50 -06:00
Asif Bacchus bfdb85b384 add option to turn on access log 2019-10-18 01:53:20 -06:00
Asif Bacchus d6e49f4d09 add timezone to params, default UTC in container 2019-10-18 01:32:48 -06:00
Asif Bacchus 5b89659c0f append newline to all configuration files 2019-10-18 00:35:02 -06:00