Multi-platform NGINX + ModSecurity 3.0.x pre-built + no public server tag and version.
10K+
This is a complete nginx + OWASP modsecurity pre-built and multi-platform.
Nginx is already patched and configured to avoid sending out server signature and version.
It's very easy to customize, here is an example:
nginx:
image: zfpsystems/nginx-modsecurity:latest
ports:
- "80:80"
- "443:443"
volumes:
- ./nginx:/etc/nginx:ro
- ./modsecurity.d:/etc/nginx/modsecurity.d:ro
- ./logs/nginx:/var/log/nginx
- ./third-party-modules:/usr/lib/nginx/modules/third-party:ro
read_only: true
tmpfs:
- /var/cache/nginx
- /var/run
- /tmp
security_opt:
- no-new-privileges:true
cap_drop:
- ALL
cap_add:
- NET_BIND_SERVICE
Site and server hardening are up to the USER, because they are specific to each scenarios and use-case.
Content type
Image
Digest
sha256:7c05c11ac…
Size
110 MB
Last updated
2 months ago
docker pull zfpsystems/nginx-modsecurity