Skip to content

Latest commit

 

History

History
41 lines (35 loc) · 2.06 KB

README.md

File metadata and controls

41 lines (35 loc) · 2.06 KB
Raw

Distroless Angie with HTTP/3 and QUIC support🚀

Build and push image📦 version GitHub issues open GitHub Maintained GitHub Maintained Visitors

The Docker image is ready to use:
docker run -d --name angie -p 80:8080/tcp -p 443:8443/tcp -p 443:8443/udp ghcr.io/ammnt/angie:latest
or
docker run -d --name angie -p 80:8080/tcp -p 443:8443/tcp -p 443:8443/udp ammnt/angie:latest

Description:

  • Based on latest version of Alpine Linux - low size (~5 MB);
  • QuicTLS with HTTP/3 and QUIC support:
    https://github.com/quictls/openssl
  • HTTP/2 with ALPN support;
  • TLS 1.3 and 0-RTT support;
  • TLS 1.2 and TCP Fast Open (TFO) support;
  • Built using hardening GCC flags;
  • NJS and Brotli support;
  • PCRE with JIT compilation;
  • zlib-ng library latest version;
  • Rootless master process - unprivileged container;
  • Async I/O threads module;
  • "Distroless" image - shell removed from the image;
  • Removed unnecessary modules;
  • Added OCI labels and annotations;
  • No excess ENTRYPOINT in the image;
  • Slimmed version by Docker Slim tool;
  • Scanned efficiency result with Dive tool;
  • Scanned by vulnerability scanners: GitHub, Docker Scout, Snyk, Grype, Clair and Syft;
  • Prioritize ChaCha cipher patch and anonymous signature - removed "Server" header ("banner"):
    https://github.com/ammnt/angie/blob/main/Dockerfile

Note:

Feel free to contact me with more security improvements🙋