Yaltik/docker_images
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

[IMP]Nginx : new configurable params (buffers)

Browse Source
This commit is contained in:
Fabien BOURGEOIS 2021-03-30 10:53:25 +02:00
parent ad0a8587b7
commit 04442b8d1d
2 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nginx/Dockerfile
View File

@ -11,6 +11,10 @@ ENV CERTIFICATE_PATH /etc/nginx/certs/req.pem
ENV CERTIFICATE_KEY_PATH /etc/nginx/certs/cert.key ENV CERTIFICATE_KEY_PATH /etc/nginx/certs/cert.key
ENV SSL_PROTOCOLS TLSv1.2 TLSv1.3 ENV SSL_PROTOCOLS TLSv1.2 TLSv1.3
ENV SSL_CIPHERS ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 ENV SSL_CIPHERS ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
ENV CLIENT_BODY_BUFFER_SIZE 1K
ENV CLIENT_HEADER_BUFFER_SIZE 1k
ENV CLIENT_MAX_BODY_SIZE 1k
ENV LARGE_CLIENT_HEADER_BUFFERS 2 1k
# Create sensible CERTS # Create sensible CERTS
RUN mkdir /etc/nginx/certs RUN mkdir /etc/nginx/certs

8
nginx/root.conf
View File

@ -24,10 +24,10 @@ server {
# resolver 127.0.0.1; # resolver 127.0.0.1;
# DDoS # DDoS
client_body_buffer_size 1K; client_body_buffer_size ${CLIENT_BODY_BUFFER_SIZE};
client_header_buffer_size 1k; client_header_buffer_size ${CLIENT_HEADER_BUFFER_SIZE};
client_max_body_size 1k; client_max_body_size ${CLIENT_MAX_BODY_SIZE};
large_client_header_buffers 2 1k; large_client_header_buffers ${LARGE_CLIENT_HEADER_BUFFERS};
location / { location / {
root /var/www/html; root /var/www/html;