Commit Graph

46 Commits

Author SHA1 Message Date
Jarek Radosz c41284d0d1
DEV: Update nginx to 1.26.1 (#930) 2025-01-28 12:07:44 +01:00
Alan Guo Xiang Tan 189cfe2ac9
Clean up nginx folder after installation. (#865) 2024-09-06 15:09:59 +08:00
Jeff Wong 7c18fce1b4
DEV: remove oxipng archive in layer (#846)
* DEV: remove oxipng archive in layer

Saves ~52MB for the layer

* DEV: Remove nginx archives

Remove another 1.2MB from image
2024-08-28 19:34:24 -07:00
Alan Guo Xiang Tan 6f8c17dbf4
Upgrade nginx to 1.26.1 since it is the new stable version (#827)
Since 1.26.x has been marked stable, 1.25.x is automatically EOL as
nginx only maintains one mainline version and one stable version.
2024-08-19 09:19:54 +08:00
Chris Rendle-Short 529267f1ec
SECURITY: Bump Nginx to 1.25.3 (#763)
The updated version contains mitigations against CVE-2023-44487 (HTTP/2 rapid reset attack).

Upstream changelog: https://nginx.org/en/CHANGES
2023-12-18 15:18:44 +11:00
Rafael dos Santos Silva 13bfcd2517 Revert "Revert last nginx bump"
This reverts commit f2d598c2cd.

We fixed the nginx.config in core to work with latest nginx
2022-12-30 13:15:05 -03:00
Rafael dos Santos Silva f2d598c2cd Revert last nginx bump
Still investigating, but something between a Discourse site being
proxied as unicorn>nginx>haproxy>cloudflare broke on the new nginx.
2022-12-28 20:17:09 -03:00
Rafael dos Santos Silva 9cd1d8a338 Update Ruby to 3.1.3 and deps bump 2022-12-21 06:23:16 +08:00
Rafael dos Santos Silva c562672f9a Revert "bump deps"
This reverts commit b1d243400c.
2022-12-21 06:23:16 +08:00
Rafael dos Santos Silva b1d243400c bump deps 2022-12-20 17:37:35 -03:00
Gabe Pacuilla 93906f14f4
DEV: use consistent third-party installation method (#610)
* DEV: use consistent third-party installation method

* FIX: slim base image build on aarch64
2022-03-14 19:22:43 -04:00
Jarek Radosz dc5b37c011 Fix checksums 2022-02-15 10:14:45 -03:00
Jarek Radosz af08dd6669 DEV: Update nginx 2022-02-15 10:14:45 -03:00
Michael Fitz-Payne aadd087790
Update dependencies (#573) 2021-10-19 12:33:03 +10:00
Rafael dos Santos Silva 8b3e8f7dc8 Update dependencies 2021-09-06 18:18:23 -03:00
Sam Saffron a59f824a27 FEATURE: update NGINX mainline 2021-08-16 15:26:41 -03:00
Rafael dos Santos Silva 1087cb2432 Bump deps 2021-05-28 13:54:21 -03:00
Rafael dos Santos Silva 660abd2d1e nginx brotli module bundles libbrotli nowadays 2021-01-27 15:27:41 -03:00
Penar Musaraj 574c0509ef
Update dependencies: nginx, redis, imagemagick (#475)
- Redis from 5.0.5 to 5.0.9
- Nginx from 1.17.9 to 1.18.0
- ImageMagick from 7.0.10-6 to 7.0.10-24
2020-07-24 09:09:15 -04:00
Michael Brown 70a3323463
Revert "Remove nginx-common package"
This reverts commit 30e0c58d1d.

* turns out we do depend on the default nginx.conf and directories provided by the distribution package
* notably /etc/nginx.conf and /etc/nginx/conf.d
2020-04-09 14:54:01 -04:00
Michael Brown 30e0c58d1d Remove nginx-common package
* I don't think we need it at all
2020-04-09 14:58:32 -03:00
Michael Brown 896202973f Add hash checks to downloaded source files
* we had one in place for redis but nowhere else
2020-04-09 14:58:32 -03:00
Michael Brown 8c7a9f14b7 Bump ImageMagick and nginx versions 2020-04-09 14:58:32 -03:00
Michael Brown 543e1e22c3 Prevent unused packages from being pulled into the base image
* e.g. X11 libraries, mysql libraries, mailutils, NTLM libraries
2020-04-09 14:58:32 -03:00
Sam Saffron 416467f6ea SECURITY: base image updates
- Ruby upgraded from 2.6.4 -> 2.6.5 to address CVEs
- Image Magick from 7.0.8-61 -> 66
- NGINX 1.17.3 -> 4 (bug fixes only)
2019-10-04 09:59:17 +10:00
Rafael dos Santos Silva c147b52591 Remove nginx modules from the package manager 2019-08-19 18:34:04 -03:00
Rafael dos Santos Silva b95ea6f77a Revert "Revert "First pass in moving to debian""
This reverts commit 29204e4158.
2019-08-19 15:17:01 -03:00
Rafael dos Santos Silva 29204e4158 Revert "First pass in moving to debian"
This reverts commit 223b69e775.
2019-08-16 18:03:14 -03:00
Rafael dos Santos Silva 223b69e775 First pass in moving to debian 2019-08-16 14:57:36 -03:00
Rafael dos Santos Silva 417b84c080 Update nginx for HTTP2 related CVEs 2019-08-13 18:06:56 -03:00
Sam Saffron 6515dc3582 DEV: bump dependencies
- new ImageMagick
- new NGINX moved to stable from mailine
- new Redis
- new PNG Quant
- updated libjemalloc
2019-06-18 16:14:38 +10:00
Gerhard Schlager ff9ddabe38 Update dependencies (#429)
* Ruby 2.6.3 which has a couple of Unicode improvements

* nginx from 1.5.9 to 1.5.12 (http://nginx.org/en/CHANGES)

* ImageMagick 7.0.8-42 and switch it back to using GitHub, because only the latest release is available on the official site and this regularly breaks our build

* libpng from 1.6.36 to 1.6.37 (security fix)

* gifsicle from 1.91 to 1.92 (http://www.lcdf.org/gifsicle/changes.html)

* Node.js v10, the latest active LTS (https://nodejs.org/en/about/releases/)
2019-04-27 18:08:16 +10:00
Sam Saffron ae073319bf Update dependencies
Including minor upgrades for redis,ruby,image magick, libpng

One notable thing here is that I removed the SHA check from redis

I am not against checking SHA but we need to explode if it fails and do
something far more consistent across our various downloads
2019-03-21 10:46:05 +11:00
Sam f77ca5a863 Update image dependencies
- Update NGINX to latest stable
- Update pngquant to latest stable
- Update ImageMagick to latest stable

Also, remove extra ruby install, it is no longer needed
2019-02-18 15:17:21 +11:00
Rafael dos Santos Silva 89a6bba8f2 Update everything 2018-06-13 19:45:15 -03:00
Sam 850d05fda4 bump nginx version 2017-12-07 11:11:57 +11:00
Gerhard Schlager 179f79f4db Removes workaround for building libbrotli
This reverts 4a33d3e72f
It was fixed in 89797d5d4b
2017-10-30 16:28:42 +01:00
Gerhard Schlager 4a33d3e72f Workaround for https://github.com/bagder/libbrotli/issues/45 2017-10-21 02:01:47 +02:00
Sam 2de1048e4e downgrade ruby to 2.3.4
upgrade nginx to latest stable
2017-07-28 09:48:25 -04:00
Rafael dos Santos Silva 1cd6aa50cd Fixes ngx_brotli compilation 2016-12-28 16:54:31 -02:00
Rafael dos Santos Silva 2e8fae89db Updates nginx from 1.11.3 to 1.11.6 2016-11-16 18:04:11 -02:00
Rafael dos Santos Silva f834837da1 Ignore ngx_brotli deprecations for now 2016-10-18 20:59:08 -02:00
Rafael dos Santos Silva f2eb98478b Ignore ngx_brotli deprecations for now 2016-10-18 20:58:59 -02:00
Sam df088f79dd upgrade image to latest mainline 2016-08-29 18:09:22 +10:00
Sam e51e80ad68 move nginx binary into place 2016-06-07 16:26:36 +10:00
Sam e8b9677b79 New base image
- add brotli support to nginx
- update imagemagick
- update phantomjs to safe version
2016-06-07 16:13:02 +10:00