{"id":21112500,"url":"https://github.com/illuusio/nginx-config","last_synced_at":"2025-07-03T11:05:18.296Z","repository":{"id":71257188,"uuid":"394252358","full_name":"illuusio/nginx-config","owner":"illuusio","description":"Opinated NGinX configuration","archived":false,"fork":false,"pushed_at":"2025-05-12T12:42:32.000Z","size":136,"stargazers_count":2,"open_issues_count":1,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-05-12T13:46:06.391Z","etag":null,"topics":["configuration","docker","nginx","nginx-configuration","podman","ssl","template-project"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/illuusio.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-08-09T10:46:08.000Z","updated_at":"2025-05-12T12:37:16.000Z","dependencies_parsed_at":null,"dependency_job_id":"b16005e6-8d3e-4226-b3f1-24c12732e253","html_url":"https://github.com/illuusio/nginx-config","commit_stats":null,"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/illuusio/nginx-config","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/illuusio%2Fnginx-config","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/illuusio%2Fnginx-config/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/illuusio%2Fnginx-config/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/illuusio%2Fnginx-config/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/illuusio","download_url":"https://codeload.github.com/illuusio/nginx-config/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/illuusio%2Fnginx-config/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":263314170,"owners_count":23447294,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["configuration","docker","nginx","nginx-configuration","podman","ssl","template-project"],"created_at":"2024-11-20T01:29:38.188Z","updated_at":"2025-07-03T11:05:18.272Z","avatar_url":"https://github.com/illuusio.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Opinionated NGINX Configuration\n\nThis project contains a highly opinionated NGINX configuration. The SSL setup adheres closely to the [Mozilla Guideline v5.7](https://ssl-config.mozilla.org) and incorporates hardening principles from [digitalocean.com's NGINX configuration](https://www.digitalocean.com/community/tools/nginx).\n\n## Highlights\n\n - Moderately configured SSL settings\n - Includes optimized SSL HTTP security headers\n - Charset set to UTF-8\n - Server tokens are disabled (server_tokens off)\n - Gzip compression is enabled with a compression level of 6\n - Sendfile is enabled to enhance file transfer speed for static files\n - sendfile_max_chunk is set to 5 MB to accommodate moderately large files such as images\n - Maximum client_max_body_size is set to 2 GB\n - Includes blocking configurations for sensitive locations and CGI endpoints\n - Battle-tested against real-world internet traffic\n\n# Docker\n\nThe current configuration is also available as a Docker image using NGINX. You can fetch the Docker image using the following command:\n\n`docker pull registry.opensuse.org/home/illuusio/images/images_15.5/opensuse/ilmi/nginx-ssl:1.0.0`\n\nFor those preferring [podman](https://podman.io/), simply replace `docker` with `podman` in the command.\n\nVersion 1.0.0 is utilized until the beta/rc phase is completed. Following this, Semantic Versioning will be adopted.\n\nThe Docker image Kiwi-ng configuration can be accessed [here](https://build.opensuse.org/package/show/home:illuusio:images/nginx-container-kiwi) and is currently based on openSUSE Leap 15.5.\nRPM\n\n## HOW-TO with Docker\n\nMount your NGINX virtual host configuration files to `/etc/nginx/vhost.d/sites` and execute `/usr/bin/basicssl-nginx-launch.sh`. Afterward, NGINX should be ready for use. SSL certificates should be located and named as follows:\n\n```\nssl_certificate      /mnt/cert/www-ssl.crt;\nssl_certificate_key  /mnt/cert/www-ssl.key;\n```\n\nThe command would resemble the following (port 8443 is not exported if SSL-enabled virtual configuration is not provided):\n\n`docker run -p 80:8080 -p 443:8443 -v /ssl/location:/mnt/cert -v /virtual/host/location:/etc/nginx/vhost.d/sites -d -it --rm (SHA NUM) /usr/bin/basicssl-nginx-container-launch.sh -d`\n\nIf the command fails, ensure that the key and certificate files are available globally as they are required.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Filluusio%2Fnginx-config","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Filluusio%2Fnginx-config","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Filluusio%2Fnginx-config/lists"}