hardened-nginx
This is a hardened nginx image that provides sane defaults and allows templating through gomplate.
nginx is an amazing little piece of software. I've been using it for years to run my applications. It's also not the easiest thing to configure. This Docker image is intended to make it easier to run it using good practices.
How to use it
Development
There is a go script for development. When run without parameters, it shows the different targets.
There is a test suite based on ServerSpec. To run it, do
./go containerize
./go test-container
Architecture
Hardening
The inspiration for the settings comes from a bunch of different sources: