Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:20.04 AS builder
+FROM debian:12 AS builder
 
 LABEL maintainer="Yury Muski <muski.yury@gmail.com>"
 
@@ -61,7 +61,6 @@ RUN curl -O https://nginx.org/download/nginx-$NGINX_VERSION.tar.gz && \
     --with-stream_realip_module \
     --with-stream_ssl_module \
     --with-stream_ssl_preread_module \
-    --with-debug \
     --add-module=/opt/ngx_brotli \
     --with-http_v3_module 	\
     --with-openssl=/opt/quiche/quiche/deps/boringssl \
@@ -70,10 +69,7 @@ RUN curl -O https://nginx.org/download/nginx-$NGINX_VERSION.tar.gz && \
     make && \
     make install;
 
-FROM ubuntu:20.04
-
-RUN apt-get update && \
-    DEBIAN_FRONTEND=noninteractive apt-get install -y libpcre3 libbrotli1
+FROM debian:12-slim
 
 COPY --from=builder /usr/sbin/nginx /usr/sbin/
 COPY --from=builder /etc/nginx/ /etc/nginx/

README.md

@@ -3,9 +3,11 @@ Nginx compiled with *BoringSSL* and *quiche* for *HTTP3* support, *Brotli* suppo
 
 ## version
 
-nginx version: nginx/1.16.1 (quiche-28ef289f)
+nginx version: nginx/1.19.6 (quiche-ad9d933)
 quiche 0.18.0
 
+Based on ubuntu:20.04, size 109MB
+
 Link for [quiche + nginx manual](https://github.com/cloudflare/quiche/tree/master/nginx)
 
 ### usage
@@ -23,11 +25,9 @@ docker run -it --rm --name certbot \
 
 - create nginx.conf like in example
 
-```sh
-# NOTE: --privileged needed for setsockopt(SO_TXTIME) access
-docker run --name nginx --privileged -d -p 80:80 -p 443:443/tcp -p 443:443/udp -v ${PWD}/temp/letsencrypt/:/opt/nginx/certs/ -v ${PWD}/nginx.conf:/etc/nginx/nginx.conf  ymuski/nginx-http3
-```
+`docker run --name nginx -d -p 80:80 -p 443:443/tcp -p 443:443/udp -v ${PWD}/temp/letsencrypt/:/opt/nginx/certs/ -v ${PWD}/nginx.conf:/etc/nginx/nginx.conf  ymuski/nginx-quic`
 
+`docker run --name nginx -d -p 80:80 -p 443:443/tcp -p 443:443/udp -v /etc/letsencrypt/:/opt/nginx/certs/ -v /opt/nginx/conf/example.nginx.conf:/etc/nginx/nginx.conf  ymuski/nginx-quic`
 
 ### Checking
 

example.nginx.conf

@@ -51,7 +51,7 @@ http {
         }
 
         # Add Alt-Svc header to negotiate HTTP/3.
-        add_header alt-svc 'h3=":443"; ma=86400';
+        add_header alt-svc 'h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400';
 
         location / {
             root   html;