Bunkerized-nginx
lastmod 2025-12-15created 2020-10-231 edits
A security-hardened Nginx Docker image.
Features
- Automatic HTTPS support via Let's Encrypt
- Applies modern web security: HTTP security headers, php.ini security, etc.
- ModSecurity open-source firewall (WAF) with the OWASP Core Rule Set applied
- Automatic banning of suspicious IPs with fail2ban
- Bot checks via cookie, JS, captcha/reCAPTCHA v3
- Blocks TOR, proxies, and bad User-Agents
- Blocks bad IPs with automatic DNSBL checks
- Prevents bruteforce attacks by applying rate limiting
- Detects bad files with ClamAV