File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -13,11 +13,21 @@ ENV PHP_FPM_LISTEN=/run/php-fpm.sock \
1313RUN curl -L https://github.com/ochinchina/supervisord/releases/download/v0.6.3/supervisord_static_0.6.3_linux_amd64 -o /usr/local/bin/supervisord \
1414 && chmod +x /usr/local/bin/supervisord \
1515 && apk add --no-cache nginx \
16- && sed -i "s|^user .*|user\ kool kool;|g" /etc/nginx/nginx.conf \
1716 && chown -R kool:kool /var/tmp/nginx \
1817 && chmod 770 /var/tmp/nginx \
1918 && ln -sf /dev/stdout /var/log/nginx/access.log \
20- && ln -sf /dev/stderr /var/log/nginx/error.log
19+ && ln -sf /dev/stderr /var/log/nginx/error.log \
20+ # add h5bp/server-configs-nginx
21+ && mkdir /etc/nginx/h5bp \
22+ && cd /etc/nginx/h5bp \
23+ && wget https://github.com/h5bp/server-configs-nginx/archive/refs/tags/3.3.0.tar.gz -O h5bp.tgz \
24+ && tar xzvf h5bp.tgz \
25+ && rm -f h5bp.tgz \
26+ && mv server-configs-nginx-*/h5bp/* . \
27+ && mv server-configs-nginx-*/nginx.conf /etc/nginx/nginx.conf \
28+ && sed -i "s|^user .*|user\ kool kool;|g" /etc/nginx/nginx.conf \
29+ && mv server-configs-nginx-*/mime.types /etc/nginx/mime.types \
30+ && rm -rf server-configs-nginx-*
2131
2232COPY supervisor.conf /kool/supervisor.conf
2333COPY default.tmpl /kool/default.tmpl
Original file line number Diff line number Diff line change @@ -30,4 +30,15 @@ server {
3030 location ~ /\.ht {
3131 deny all;
3232 }
33+
34+ # basic H5BP suggestions
35+ include h5bp/internet_explorer/x-ua-compatible.conf ;
36+ include h5bp/security/referrer-policy.conf ;
37+ include h5bp/security/x-content-type-options.conf ;
38+ include h5bp/security/x-frame-options.conf ;
39+ include h5bp/security/x-xss-protection.conf ;
40+
41+ # performance enhancements (mostly for caching static data)
42+ include h5bp/web_performance/cache-file-descriptors.conf ;
43+ include h5bp/web_performance/pre-compressed_content_gzip.conf ;
3344}
Original file line number Diff line number Diff line change 11[program:nginx]
22depends_on = php-fpm
3- command = nginx -g "pid /run/nginx.pid; daemon off;"
3+ command = nginx -g "daemon off;"
44stopasgroup = true
55stderr_logfile = /dev/stderr
66stdout_logfile = /dev/stdout
Original file line number Diff line number Diff line change @@ -13,11 +13,21 @@ ENV PHP_FPM_LISTEN=/run/php-fpm.sock \
1313RUN curl -L https://github.com/ochinchina/supervisord/releases/download/v0.6.3/supervisord_static_0.6.3_linux_amd64 -o /usr/local/bin/supervisord \
1414 && chmod +x /usr/local/bin/supervisord \
1515 && apk add --no-cache nginx \
16- && sed -i "s|^user .*|user\ kool kool;|g" /etc/nginx/nginx.conf \
1716 && chown -R kool:kool /var/tmp/nginx \
1817 && chmod 770 /var/tmp/nginx \
1918 && ln -sf /dev/stdout /var/log/nginx/access.log \
20- && ln -sf /dev/stderr /var/log/nginx/error.log
19+ && ln -sf /dev/stderr /var/log/nginx/error.log \
20+ # add h5bp/server-configs-nginx
21+ && mkdir /etc/nginx/h5bp \
22+ && cd /etc/nginx/h5bp \
23+ && wget https://github.com/h5bp/server-configs-nginx/archive/refs/tags/3.3.0.tar.gz -O h5bp.tgz \
24+ && tar xzvf h5bp.tgz \
25+ && rm -f h5bp.tgz \
26+ && mv server-configs-nginx-*/h5bp/* . \
27+ && mv server-configs-nginx-*/nginx.conf /etc/nginx/nginx.conf \
28+ && sed -i "s|^user .*|user\ kool kool;|g" /etc/nginx/nginx.conf \
29+ && mv server-configs-nginx-*/mime.types /etc/nginx/mime.types \
30+ && rm -rf server-configs-nginx-*
2131
2232COPY supervisor.conf /kool/supervisor.conf
2333COPY default.tmpl /kool/default.tmpl
Original file line number Diff line number Diff line change @@ -30,4 +30,15 @@ server {
3030 location ~ /\.ht {
3131 deny all;
3232 }
33+
34+ # basic H5BP suggestions
35+ include h5bp/internet_explorer/x-ua-compatible.conf ;
36+ include h5bp/security/referrer-policy.conf ;
37+ include h5bp/security/x-content-type-options.conf ;
38+ include h5bp/security/x-frame-options.conf ;
39+ include h5bp/security/x-xss-protection.conf ;
40+
41+ # performance enhancements (mostly for caching static data)
42+ include h5bp/web_performance/cache-file-descriptors.conf ;
43+ include h5bp/web_performance/pre-compressed_content_gzip.conf ;
3344}
Original file line number Diff line number Diff line change 11[program:nginx]
22depends_on = php-fpm
3- command = nginx -g "pid /run/nginx.pid; daemon off;"
3+ command = nginx -g "daemon off;"
44stopasgroup = true
55stderr_logfile = /dev/stderr
66stdout_logfile = /dev/stdout
Original file line number Diff line number Diff line change @@ -13,11 +13,21 @@ ENV PHP_FPM_LISTEN=/run/php-fpm.sock \
1313RUN curl -L https://github.com/ochinchina/supervisord/releases/download/v0.6.3/supervisord_static_0.6.3_linux_amd64 -o /usr/local/bin/supervisord \
1414 && chmod +x /usr/local/bin/supervisord \
1515 && apk add --no-cache nginx \
16- && sed -i "s|^user .*|user\ kool kool;|g" /etc/nginx/nginx.conf \
1716 && chown -R kool:kool /var/lib/nginx \
1817 && chmod 770 /var/lib/nginx/tmp \
1918 && ln -sf /dev/stdout /var/log/nginx/access.log \
20- && ln -sf /dev/stderr /var/log/nginx/error.log
19+ && ln -sf /dev/stderr /var/log/nginx/error.log \
20+ # add h5bp/server-configs-nginx
21+ && mkdir /etc/nginx/h5bp \
22+ && cd /etc/nginx/h5bp \
23+ && wget https://github.com/h5bp/server-configs-nginx/archive/refs/tags/3.3.0.tar.gz -O h5bp.tgz \
24+ && tar xzvf h5bp.tgz \
25+ && rm -f h5bp.tgz \
26+ && mv server-configs-nginx-*/h5bp/* . \
27+ && mv server-configs-nginx-*/nginx.conf /etc/nginx/nginx.conf \
28+ && sed -i "s|^user .*|user\ kool kool;|g" /etc/nginx/nginx.conf \
29+ && mv server-configs-nginx-*/mime.types /etc/nginx/mime.types \
30+ && rm -rf server-configs-nginx-*
2131
2232COPY supervisor.conf /kool/supervisor.conf
2333COPY default.tmpl /kool/default.tmpl
Original file line number Diff line number Diff line change @@ -30,4 +30,15 @@ server {
3030 location ~ /\.ht {
3131 deny all;
3232 }
33+
34+ # basic H5BP suggestions
35+ include h5bp/internet_explorer/x-ua-compatible.conf ;
36+ include h5bp/security/referrer-policy.conf ;
37+ include h5bp/security/x-content-type-options.conf ;
38+ include h5bp/security/x-frame-options.conf ;
39+ include h5bp/security/x-xss-protection.conf ;
40+
41+ # performance enhancements (mostly for caching static data)
42+ include h5bp/web_performance/cache-file-descriptors.conf ;
43+ include h5bp/web_performance/pre-compressed_content_gzip.conf ;
3344}
Original file line number Diff line number Diff line change 11[program:nginx]
22depends_on = php-fpm
3- command = nginx -g "pid /run/nginx.pid; daemon off;"
3+ command = nginx -g "daemon off;"
44stopasgroup = true
55stderr_logfile = /dev/stderr
66stdout_logfile = /dev/stdout
Original file line number Diff line number Diff line change @@ -13,11 +13,21 @@ ENV PHP_FPM_LISTEN=/run/php-fpm.sock \
1313RUN curl -L https://github.com/ochinchina/supervisord/releases/download/v0.6.3/supervisord_static_0.6.3_linux_amd64 -o /usr/local/bin/supervisord \
1414 && chmod +x /usr/local/bin/supervisord \
1515 && apk add --no-cache nginx \
16- && sed -i "s|^user .*|user\ kool kool;|g" /etc/nginx/nginx.conf \
1716 && chown -R kool:kool /var/lib/nginx \
1817 && chmod 770 /var/lib/nginx/tmp \
1918 && ln -sf /dev/stdout /var/log/nginx/access.log \
20- && ln -sf /dev/stderr /var/log/nginx/error.log
19+ && ln -sf /dev/stderr /var/log/nginx/error.log \
20+ # add h5bp/server-configs-nginx
21+ && mkdir /etc/nginx/h5bp \
22+ && cd /etc/nginx/h5bp \
23+ && wget https://github.com/h5bp/server-configs-nginx/archive/refs/tags/3.3.0.tar.gz -O h5bp.tgz \
24+ && tar xzvf h5bp.tgz \
25+ && rm -f h5bp.tgz \
26+ && mv server-configs-nginx-*/h5bp/* . \
27+ && mv server-configs-nginx-*/nginx.conf /etc/nginx/nginx.conf \
28+ && sed -i "s|^user .*|user\ kool kool;|g" /etc/nginx/nginx.conf \
29+ && mv server-configs-nginx-*/mime.types /etc/nginx/mime.types \
30+ && rm -rf server-configs-nginx-*
2131
2232COPY supervisor.conf /kool/supervisor.conf
2333COPY default.tmpl /kool/default.tmpl
You can’t perform that action at this time.
0 commit comments