bunkerized-nginx v1.5.2 releases: nginx Docker image secure by default

bunkerized-nginx

nginx Docker image secure by default.

Avoid the hassle of following security best practices each time you need a web server or reverse proxy. Bunkerized-nginx provides generic security configs, settings, and tools so you don’t need to do it yourself.

A non-exhaustive list of features :

• HTTPS support with transparent Let’s Encrypt automation
• State-of-the-art web security: HTTP security headers, prevent leaks, TLS hardening, …
• Integrated ModSecurity WAF with the OWASP Core Rule Set
• Automatic ban of strange behaviors with fail2ban
• Antibot challenge through a cookie, javascript, captcha, or recaptcha v3
• Block TOR, proxies, bad user-agents, countries, …
• Block known bad IP with DNSBL and CrowdSec
• Prevent bruteforce attacks with rate limiting
• Detect bad files with ClamAV
• Easy to configure with environment variables

Fooling automated tools/scanners :

Changelog v1.5.2

• [BUGFIX] Fix UI fetching only default values from the database (fixes no trash button too)
• [BUGFIX] Fix infinite loop when using autoconf
• [BUGFIX] Fix BunkerWeb fails to start after reboot on Fedora and Rhel
• [BUGFIX] Fix logs page not working in UI on Linux integrations
• [BUGFIX] Fix settings regex that had issues in general and with the UI
• [BUGFIX] Fix scheduler error with external plugins when reloading
• [BUGFIX] Fix permissions with folders in linux integrations
• [MISC] Push Docker images to GitHub packages (ghcr.io repository)
• [MISC] Improved CI/CD
• [MISC] Updated python dependencies
• [MISC] Updated Python Docker image to 3.11.5-alpine in Dockerfiles
• [MISC] Add support for ModSecurity JSON LogFormat
• [MISC] Updated OWASP coreruleset to 3.3.5

Install & Use

Copyright (C) 2022 bunkerity