Matthew Vance

I'm not familiar with nginx on Windows. That being said, the nginx build is using OpenSSL for the TLS/crypto library. As such, the SSL/TLS settings from [Schannel SSP](https://docs.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings) shouldn't have...

Thanks for asking. These files are what systemd reads to understand how to manage the nginx process (start, stop, reload, etc.). So things related to syatemctl. The files do not...

Also, this article night help: https://www.digitalocean.com/community/tutorials/understanding-systemd-units-and-unit-files On Wed, Feb 27, 2019, 1:54 PM Fabian Egli wrote: > While preparing to compile nginx from source with this build script, I >...

No worries. Apologies for not fully understanding your main question. I'm certainly open to better ways of doing things when folks like you have good suggestions. Unfortunately, I don't even...

Good point. I'm tempted to revise it further to be closer to this [Caddy service file](https://gist.github.com/MatthewVance/1c8ae6f15a9193310ebf4b63be9d0f44). However, I'm concerned the extra security hardening would make it less general purpose.

Thanks for this. These are all valid options. I wanted to briefly write here to let you know I have not forgotten about this—I just have not made time to...

Thanks for the suggestion. I had thought about including that flag for speed, but left it off for security purposes since this includes building a crypto library. I'm not sure...

Perhaps, but OpenSSL has had a history of make periodically failing to work with -j so even if the binaries are the same using the flag is not the safest...

Thanks for the report. Would it help if the `/opt/stubby/.getdns` directory was created as part of the build process in the following section? https://github.com/MatthewVance/stubby-docker/blob/1046cd96c4c7feca8c115528e7266714b508b5fc/stubby/Dockerfile#L99 Or would setting appdata_dir in the...

Hello. You will need to modify the [stubby.yml](https://github.com/MatthewVance/stubby-docker/blob/master/stubby/stubby.yml) file. Comment out the Cloudflare ones and uncomment the Google ones (starting at [line 107](https://github.com/MatthewVance/stubby-docker/blob/master/stubby/stubby.yml#L107)). From there, rebuild the image. See this...