nginx/README.md
titanz e708acbdf9
Some checks failed
Build Unprivileged Stable / Build & push new image (push) Successful in 10m22s
Build Unprivileged Stable Slim / Build & push new image (push) Successful in 10m18s
Build Unprivileged Mainline / Build & push new image (push) Successful in 10m21s
Build Unprivileged Mainline Slim / Build & push new image (push) Successful in 10m18s
Build Stable / Build & push new image (push) Successful in 10m17s
Build Mainline / Build & push new image (push) Successful in 10m23s
Build Mainline Slim / Build & push new image (push) Successful in 10m22s
Build Stable Slim / Build & push new image (push) Failing after 10m16s
edited readme
2025-02-06 20:35:36 +01:00

36 lines
1.5 KiB
Markdown

# NGINX
![Build unprivileged mainline slim, scan & push](https://git.conorz.at/titanz-containers/nginx/actions/workflows/build-unprivileged-mainline-slim.yml/badge.svg)
![Build unprivileged stable slim, scan & push](https://git.conorz.at/titanz-containers/nginx/actions/workflows/build-unprivileged-stable-slim.yml/badge.svg)
### Features & usage
- Built on upstream [NGINX images](https://github.com/nginxinc/docker-nginx), to be used as a drop-in replacement. Comes with regular rebuilds and hardened_malloc which are standard among titanz containers.
- Adds `ca-certificates` package for MTLS setups.
### Sample Docker Compose config
```
nginx:
container_name: nginx
image: git.conorz.at/titanz-containers/nginx:unprivileged-slim
restart: unless-stopped
ports:
- "8080:8080/tcp"
volumes:
- "./nginx/default.conf:/etc/nginx/conf.d/default.conf:Z,ro"
user: "101:101"
read_only: true
tmpfs:
- /var/cache/nginx:mode=0770,uid=101,gid=101,noexec,nosuid,nodev
- /tmp:mode=0770,uid=101,gid=101,noexec,nosuid,nodev
security_opt:
- "no-new-privileges=true"
cap_drop:
- ALL
```
### Licensing
- The code in this repository is licensed under the Apache license. 😇
- These images are built on upstream images, which are under the BSD license. Copyright to the base images belongs to F5 Inc.
- Any image built by titanz containers is provided under the combination of license terms resulting from the use of individual packages.