Skip to content

Docker NGINX v2.0.0

Latest
Latest

Choose a tag to compare

View all tags
@Allyda Allyda released this 23 Jul 22:54
v2.0.0
9ed6685

Highlights

  • Production-hardened non-root runtime with read-only filesystem support, health checks, and graceful shutdown
  • Multi-stage build with pinned and SHA-256-verified NGINX, ModSecurity, connector, and OWASP CRS sources
  • Backward-compatible internal port 80 and tested mounted legacy conf.d configurations
  • Hardened WAF, real-IP handling, rate limiting, request body limits, and audit log retention
  • CI vulnerability scanning, SBOM, provenance, and keyless Cosign signatures
  • Runtime image reduced to approximately 79 MB

Compatibility

Existing conf.d files and templates listening on port 80 remain supported. Mounted files must be readable by UID/GID 101. See the README for migration and production configuration details.

Full Changelog: v1.0.1...v2.0.0

Assets 2
Loading