added nginx docker image

nginx/conf/nginx.conf

@@ -0,0 +1,90 @@
+
+# load_module modules/ngx_http_xslt_filter_module.so;
+# load_module modules/ngx_http_image_filter_module.so;
+# load_module modules/ngx_http_geoip_module.so;
+# load_module modules/ngx_http_perl_module.so;
+# load_module modules/ngx_stream_geoip_module.so;
+load_module modules/ngx_http_headers_more_filter_module.so;
+load_module modules/ngx_http_brotli_static_module.so;
+#load_module modules/ngx_http_brotli_filter_module.so;
+#load_module modules/ngx_http_js_module.so;
+
+user  nginx;
+worker_processes  1;
+
+error_log  /var/log/nginx/error.log warn;
+pid        /var/run/nginx.pid;
+
+pcre_jit  on;
+
+events {
+    worker_connections  1024;
+}
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile        on;
+    aio             threads;
+
+    tcp_nopush      on;
+    tcp_nodelay     on;
+    server_tokens   off;
+
+    keepalive_disable  msie6;
+
+    ssl_dyn_rec_enable on;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ecdh_curve X25519:P-521:P-384;
+    ssl_ciphers [ECDHE-ECDSA-CHACHA20-POLY1305|ECDHE-RSA-CHACHA20-POLY1305|ECDHE-ECDSA-AES256-GCM-SHA384|ECDHE-RSA-AES256-GCM-SHA384]:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
+    ssl_prefer_server_ciphers on;
+    ssl_session_cache shared:SSL:20m;
+    ssl_session_timeout 15m;
+    ssl_session_tickets off;
+
+    http2 on;
+    http3 on;
+    quic_retry on;
+    #ssl_early_data on;
+    
+    gzip_static on;
+    gzip on;
+    gzip_comp_level 5;
+    gzip_min_length 512;
+    gzip_proxied any;
+    gzip_vary on;
+    gzip_disable "msie6";
+    gzip_types
+        text/plain
+        text/css
+        text/x-component
+        text/javascript application/javascript application/x-javascript
+        text/xml application/xml application/rss+xml
+        application/json
+        application/vnd.ms-fontobject
+        font/truetype font/opentype
+        image/svg+xml;
+
+    brotli_static on;
+    #brotli on;
+    #brotli_comp_level 6;
+    #brotli_types
+    #    text/plain
+    #    text/css
+    #    text/x-component
+    #    text/javascript application/javascript application/x-javascript
+    #    text/xml application/xml application/rss+xml
+    #    application/json
+    #    application/vnd.ms-fontobject
+    #    font/truetype font/opentype
+    #    image/svg+xml;
+
+    include /etc/nginx/conf.d/*.conf;
+}

nginx/conf/nginx.vh.no-default.conf

@@ -0,0 +1,16 @@
+# Drop requests for unknown hosts
+#
+# If no default server is defined, nginx will use the first found server.
+# To prevent host header attacks, or other potential problems when an unknown
+# servername is used in a request, it's recommended to drop the request
+# returning 444 "no response".
+
+server {
+  listen 80 default_server;
+  return 444;
+}
+
+server {
+  listen 443 ssl http2 default_server;
+  ssl_reject_handshake on;
+}