Skip to content

Latest commit

 

History

History
60 lines (50 loc) · 2.19 KB

README.md

File metadata and controls

60 lines (50 loc) · 2.19 KB
Raw

Docker image for Nginx with built in support for TLS 1.3

Nginx and openssl built from source in a Docker image to provide out of the box TLS 1.3 support.

  • Image includes pre-built, self signed key and certificate
  • Container runs as non-root (user nginx is created and used)
  • Support for mounting custom configurations

Get the Docker image

You can skip the build and get the Docker image

docker pull eldada-docker-examples.bintray.io/nginx-tls13:1.15.8-0.1

Build

Build Docker image

docker build -t eldada-docker-examples.bintray.io/nginx-tls13:1.15.8-0.1 .

Run

Simple setup

Start the Docker container with ports 80 and 443 exposed

docker run --name nginx -p 80:80 -p 443:443 eldada-docker-examples.bintray.io/nginx-tls13:1.15.8-0.1

Override config

You can override default configuration files nginx.conf and mime.types.

  1. Create your custom nginx.conf
  2. Mount the custom file to /etc/nginx/nginx.confq
docker run --name nginx -p 80:80 -p 443:443 -v ${CUSTOM_NGINX_CONF}:/etc/nginx/nginx.conf eldada-docker-examples.bintray.io/nginx-tls13:1.15.8-0.1

Follow the same procedure to override mime.types.

Add custom configuration

You can add custom configuration files to nginx

  1. Prepare a directory for your configuration files
  2. Prepare one or more configuration files with the .conf extension in the configuration directory
  3. Mount the configuration directory to container's /etc/nginx/conf.d
docker run --name nginx -p 80:80 -p 443:443 -v ${PATH_TO_CONFIG_DIR}:/etc/nginx/conf.d eldada-docker-examples.bintray.io/nginx-tls13:1.15.8-0.1

Add custom html

You can add a custom html directory

  1. Prepare a directory with your custom html files (and any other resources needed)
  2. Mount the htm directory to container's /etc/nginx/html
docker run --name nginx -p 80:80 -p 443:443 -v ${PATH_TO_HTML}:/etc/nginx/html eldada-docker-examples.bintray.io/nginx-tls13:1.15.8-0.1

Openssl

For supporting the TLS 1.3, openssl 1.1.1 is used

Nginx

Current Nginx version is 1.15.8

Thanks

This repository is initially forked and inspired from https://github.com/ricardbejarano/nginx.