Skip to content
/ angie Public

Distroless Angie with HTTP/3 and QUIC support🚀

License

Notifications You must be signed in to change notification settings

ammnt/angie

This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Folders and files

NameName
Last commit message
Last commit date

Latest commit

898cc20 · Dec 22, 2024
Dec 22, 2024
Sep 11, 2024
Sep 21, 2023
Dec 20, 2024
Dec 20, 2024
Sep 21, 2024
Dec 22, 2024
Sep 21, 2024

Repository files navigation

Distroless Angie with HTTP/3 and QUIC support🚀

Build and push image📦 version GitHub issues open GitHub Maintained GitHub Maintained Visitors

The Docker image is ready to use:
docker run -d --rm -p 8080:8080/tcp ghcr.io/ammnt/angie:latest
or
docker run -d --rm -p 8080:8080/tcp ammnt/angie:latest

Description:

  • Based on latest version of Alpine Linux - low size (~5 MB);
  • QuicTLS with HTTP/3 and QUIC support:
    https://github.com/quictls/openssl
  • HTTP/2 with ALPN support;
  • TLS 1.3 and 0-RTT support;
  • TLS 1.2 and TCP Fast Open (TFO) support;
  • Built using hardening GCC flags;
  • NJS and Brotli support;
  • PCRE with JIT compilation;
  • zlib-ng library latest version;
  • Rootless master process - unprivileged container;
  • Async I/O threads module;
  • "Distroless" image - shell removed from the image;
  • Removed unnecessary modules;
  • Added OCI labels and annotations;
  • No excess ENTRYPOINT in the image;
  • Slimmed version by Docker Slim tool;
  • Scanned efficiency result with Dive tool;
  • Scanned by vulnerability scanners: GitHub, Docker Scout, Snyk, Grype, Clair and Syft;
  • Prioritize ChaCha cipher patch and anonymous signature - removed "Server" header ("banner"):
    https://github.com/ammnt/angie/blob/main/Dockerfile

Note:

Feel free to contact me with more security improvements🙋