maxlonplay/nginx-shield repository overview

services:
  nginx-shield:
    image: maxlonplay/nginx-shield:latest
    container_name: nginx-shield
    restart: always
    environment:
      # Disables the internal geolocation module (requires at least 2 GB of RAM when active). Set to "true", "1", or "yes" to disable.
      - DISABLE_INTERNAL_GEOLOCATE=false
      # External geolocation server (standalone). Format: "ip:port" (e.g. "192.168.1.10:8881")
      # If set, the internal module will NOT start and all geo requests will be forwarded to the external server.
      # Leave empty to use the internal module (requires DISABLE_INTERNAL_GEOLOCATE=false).
      - USE_EXTERNAL_GEOLOCATE=
      # GeoIP language code for country names ('it' for Italian, 'en' for English, 'fr' for French, 'es' for Spanish, 'de' for German)
      - GEOIP_LANG=it
    volumes:
      # Nginx access and error logs directory (required for log monitoring and analysis)
      - /dockers/npm/data/logs:/app/nginx-logs
      # Fail2Ban socket directory (required to interact with Fail2Ban on the host)
      - /var/run/fail2ban:/var/run/fail2ban
      # Persistent data for nginx-shield (e.g., configuration, blocklists, etc.)
      - /nginx-shield/data:/app/data
      # Sync container time with host system time (read-only)
      - /etc/localtime:/etc/localtime:ro
    ports:
      # Web interface / API port
      - "8000:8000"
     # - "8881:8881" # Uncomment if you want to expose the API port for the geolocate service (if enabled)