diff --git a/Dockerfile b/Dockerfile index c5ba056..0193d6c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,16 +3,32 @@ ARG BUILD ARG LUAJIT_INC=/usr/include/luajit-2.1 ARG LUAJIT_LIB=/usr/lib + ARG NGINX_VER=1.25.3 +ARG OPENSSL_VER=openssl-3.1.4+quic +ARG MODSEC_VER=v3.0.11 + +ARG DTR_VER=1.25.1 +ARG RCP_VER=1.25.3 + +ARG NB_VER=master +ARG NF_VER=master +ARG NJS_VER=0.8.2 +ARG NDK_VER=v0.3.3 +ARG LNM_VER=v0.10.25 +ARG MODSECNGX_VER=v1.0.3 +ARG LRC_VER=v0.1.27 +ARG LRL_VER=v0.13 +ARG NHG2M_VER=3.4 WORKDIR /src # Requirements RUN apk add --no-cache ca-certificates build-base patch cmake git libtool autoconf automake \ libatomic_ops-dev zlib-dev luajit-dev pcre2-dev linux-headers yajl-dev libxml2-dev libxslt-dev perl-dev curl-dev lmdb-dev lua5.1-dev lmdb-dev geoip-dev libmaxminddb-dev # Openssl -RUN git clone --recursive https://github.com/quictls/openssl --branch openssl-3.1.4+quic /src/openssl +RUN git clone --recursive https://github.com/quictls/openssl --branch "$OPENSSL_VER" /src/openssl # modsecurity -RUN git clone --recursive https://github.com/SpiderLabs/ModSecurity /src/ModSecurity && \ +RUN git clone --recursive https://github.com/SpiderLabs/ModSecurity --branch "$MODSEC_VER" /src/ModSecurity && \ cd /src/ModSecurity && \ /src/ModSecurity/build.sh && \ /src/ModSecurity/configure --with-pcre2 --with-lmdb && \ @@ -22,8 +38,8 @@ RUN git clone --recursive https://github.com/SpiderLabs/ModSecurity /src/ModSecu # Nginx RUN wget https://nginx.org/download/nginx-"$NGINX_VER".tar.gz -O - | tar xzC /src && \ mv /src/nginx-"$NGINX_VER" /src/nginx && \ - wget https://raw.githubusercontent.com/nginx-modules/ngx_http_tls_dyn_size/master/nginx__dynamic_tls_records_1.25.1%2B.patch -O /src/nginx/1.patch && \ - wget https://raw.githubusercontent.com/openresty/openresty/master/patches/nginx-1.23.0-resolver_conf_parsing.patch -O /src/nginx/2.patch && \ + wget https://raw.githubusercontent.com/nginx-modules/ngx_http_tls_dyn_size/master/nginx__dynamic_tls_records_"$DTR_VER"%2B.patch -O /src/nginx/1.patch && \ + wget https://raw.githubusercontent.com/openresty/openresty/master/patches/nginx-"$RCP_VER"-resolver_conf_parsing.patch -O /src/nginx/2.patch && \ sed -i "s|nginx/|NPMplus/|g" /src/nginx/src/core/nginx.h && \ sed -i "s|Server: nginx|Server: NPMplus|g" /src/nginx/src/http/ngx_http_header_filter_module.c && \ sed -i "s|
nginx
|
NPMplus
|g" /src/nginx/src/http/ngx_http_special_response.c && \ @@ -32,21 +48,20 @@ RUN wget https://nginx.org/download/nginx-"$NGINX_VER".tar.gz -O - | tar xzC /sr patch -p1