Nginx with Brotli and ModSecurity brought to Docker

Krishna Modi
2 min readOct 19, 2018
Docker Image for Nginx with Brotli compression and ModSecurity CRS v3

Are you using Docker for your next deployment?

How about web server? Nginx? Good choice!

But how do you manage security?

Docker is secured already? Myth! Wake up

Yes, you need to handle your own security, Docker ain’t gonna do shit to help you secure things up with public accessibility to your endpoints.

Well, I recently bumped into Nginx ModSecurity module and found it amazing.

It handles a ton of vulnerabilities and keeps your app secure from a major web and SQL vulnerabilities which otherwise were not handled by nginx default.

Also, Brotli is a much better compression offered by Google, gives 20% extra compression as compared to GZip.

Wow! isn’t it? So how do you use this in your deployment?

It takes a lot of building and compiling and configuring to get this working. 15 mins of minimum build time guaranteed!

Don’t worry, I’ve got your back and built a Docker image for you with all these together.

Try https://hub.docker.com/r/krish512/modsecurity/

Latest Nginx with Modsecurity v3 and Brotli compression level 11

Repo link: https://github.com/krish512/docker_nginx_modsecurity

Please show some love if you like my work :)

PS: Not really promoting my repo, just helping the community with my contribution and expecting PRs raised towards the repo to make it more feature-rich.

--

--