dockerfiles
dockerfiles copied to clipboard
EasyEngine
Various Dockerfiles in use by EasyEngine
CSP and Perimission Policy when added can be extra good But needs to be set as per usage so skipping it Maybee after discussion we can set a minimal one
Currently, we have bash as the default shell, it will be nice to have ZSH as the default shell as it has better features and aesthetics.
issue: https://github.com/EasyEngine/feature-requests/issues/73
It is there in multiple plugins. Planning to add it, but keep it disabled by default so that it does not hamper anything. Whoever wants it can enable this extension.
SOmetimes while importing database of big site, global mysql crashes. We need to set `max_allowed_packet_size to 512M` to prevent that from happening.
The source (nginx-proxy/nginx-proxy) does not use 'generate-dhparam.sh' so the container fails to generate the dhparam.pem. Adding the logic used by the source.
We need to pin the docker images to a specific hash to avoid any unnecessary surprises. Something like ``` FROM debian@sha256:de3eac83cd481c04c5d6c7344cd7327625a1d8b2540e82a8231b5675cef0ae5f ``` Here is a link to an [Example Dockerfile](https://github.com/cloudflare/nginx-google-oauth/blob/a0c4182898332d194addb9f6ecc2acf97b5e174a/Dockerfile#L2)
Need to check both the below configs and apply the relevant configuration to Nginx, Nginx-proxy and Mysql. https://github.com/dev-sec/ansible-collection-hardening/blob/master/roles/nginx_hardening/defaults/main.yml https://github.com/dev-sec/ansible-collection-hardening/blob/master/roles/mysql_hardening/defaults/main.yml
Label schema hasn't been updated in a while and it has been superseded by opencontainers image spec. https://github.com/opencontainers/image-spec/blob/master/annotations.md. So we need to migrate our labels in images.
Closes: https://github.com/EasyEngine/dockerfiles/issues/117 - [x] Fix log format in conf file. - [ ] Add migration for existing sites. - [ ] Add `rt_cache` format in access logs for sites created...