The Docker image is ready to use:
docker run -d --rm -p 127.0.0.1:8080:8080/tcp ghcr.io/ammnt/angie:latest
or
docker run -d --rm -p 127.0.0.1:8080:8080/tcp ammnt/angie:latest
- Based on latest version of Alpine Linux - low size (~5 MB);
- QuicTLS with HTTP/3 and QUIC support:
https://github.com/quictls/openssl - HTTP/2 with ALPN support;
- TLS 1.3 and 0-RTT support;
- TLS 1.2 and TCP Fast Open (TFO) support;
- Built using hardening GCC flags;
- NJS and Brotli support;
- PCRE with JIT compilation;
- zlib-ng library latest version;
- Rootless master process - unprivileged container;
- Async I/O threads module;
- "Distroless" image - shell removed from the image;
- Removed unnecessary modules;
- Added OCI labels and annotations;
- No excess ENTRYPOINT in the image;
- Slimmed version by Docker Slim tool;
- Scanned efficiency result with Dive tool;
- Scanned by vulnerability scanners: GitHub, Docker Scout, Snyk, Grype, Clair and Syft;
- Prioritize ChaCha cipher patch and anonymous signature - removed "Server" header ("banner"):
https://github.com/ammnt/angie/blob/main/Dockerfile
Feel free to contact me with more security improvements🙋