yrccondor / docker-nginx

A Secured Dockerized Nginx

Docker Nginx

Dockerized Nginx with TLS 1.3 and Brotli support.

Based on nginxinc/docker-nginx.

Config

To enable TLS 1.3, use:

ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers [TLS13+AESGCM+AES128|TLS13+AESGCM+AES256|TLS13+CHACHA20]:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA:RSA+AES128+SHA:RSA+AES256+SHA:RSA+3DES;

To enable Brotli, use this in http block:

brotli on;  
brotli_comp_level 6;  
brotli_buffers 16 8k;  
brotli_min_length 20;  
brotli_types *;

Modification Details

Compiled with OpenSSL 1.1.1b, which supports TLS 1.3.

Module ngx_brotli has been added for Brotli support.

Build

git clone git://github.com/hackinit/docker-nginx.git
cd docker-nginx
docker build -t nginx:1.15.12-modified .