Commit Graph

179 Commits

Author SHA1 Message Date
79d99eb02f iconv workaround no longer needed
Official PHP image now includes it by default for Alpine
2022-05-05 08:34:33 +02:00
0b3b86dfff snuffleupagus: fix basic settings on new installs 2022-05-05 08:34:20 +02:00
a906f113b5 Update SECURITY.md 2022-05-05 08:31:30 +02:00
1ffd446214 ensure JIT is disabled
It was disabled by default (jit_buffer_size=0 by default), but this setting makes sure JIT is unavailable at runtime. While JIT may bring minor performance improvements, this is not worth the risk of being exposed to tons of bugs due to JIT code complexity.
2022-05-05 08:31:10 +02:00
8c11184ba1 follow OCI spec for labels 2022-05-05 08:30:45 +02:00
2c662e7862 snuffleupagus: fix broken "Basic settings" access 2022-05-05 08:29:46 +02:00
f7aded2aeb chown not necessary here 2022-05-05 08:28:41 +02:00
9a30d0ff02 snuffleupagus: enable sloppy_comparison 2022-05-05 08:28:32 +02:00
33dc46def2 snuffleupagus: enable global_strict 2022-05-05 08:28:21 +02:00
7974e54491 support and enable snuffleupagus 2022-05-05 08:25:52 +02:00
6e8e9619ed add note about signed images 2022-05-05 08:24:32 +02:00
eceef9c4ac fix setup: do not wait for db if using sqlite3 2022-05-05 08:24:05 +02:00
bce0750e6e refactor build workflow, support signing 2022-05-05 08:23:13 +02:00
d451bcf1ef mention gpg key user id 2022-05-05 07:50:40 +02:00
2ac3ec67f2 proper integrity check 2022-05-05 07:50:09 +02:00
df476c0dc4 remove unused build-time variables
we always use the latest anyway
2022-05-05 07:49:41 +02:00
7611471834 disable legacy X-XSS-Protection
Obsolete, unsafe, and superseded by CSP
2022-05-05 07:48:42 +02:00
feae76b13a Update Nextcloud to 23.0.3 2022-03-21 23:25:42 +01:00
51912688d2 Update Nextcloud to 23.0.2 2022-02-15 20:44:48 +01:00
9fbe35460b Update Nextcloud to 23.0.1 2022-01-27 21:07:18 +01:00
bc89ff25ed Update hardened_malloc to 11 2022-01-27 19:56:15 +01:00
d3bfe95eb4 use light variant of hardened malloc
Much lower memory usage, remains security-focused
2022-01-17 10:46:41 +01:00
beab287fc4 Update hardened malloc to 10 2022-01-13 20:05:21 +01:00
b839ac7838 Use github.actor also for trivy step 2022-01-13 19:38:14 +01:00
9851eb52ee waiting for the database container on setup 2022-01-13 19:35:53 +01:00
9b0a84a36f Also use github.actor for the scan workfow 2021-12-08 21:25:40 +01:00
70560d7d48 Use github.actor to detect the username for ghcr.io upload 2021-12-08 21:25:35 +01:00
8b15621860 Adding back smb support to the image 2021-12-07 15:39:06 +01:00
63ac90199c Fix typo in workflow cron argument 2021-12-06 08:48:44 +01:00
a0cd4f12c9 Update README 2021-12-06 08:31:48 +01:00
ae37864108 Enable scan during build again and change trigger 2021-12-06 08:29:08 +01:00
94d1a1f7c7 Update to Alpine 3.15 2021-12-05 21:34:06 +01:00
0b59268aa8 Change .well-known regex 2021-12-05 21:32:08 +01:00
11632128e4 Add imagick dependency 2021-12-05 21:02:36 +01:00
6d3ff722dd Update to Nextcloud 23 2021-12-04 10:26:48 +01:00
d279197f16 Remove nc_port 2021-12-04 10:23:36 +01:00
3a563dd4e2 Use GITHUB_TOKEN for authentication 2021-12-03 17:13:45 +01:00
76891f6cdf Owner name changes 2021-12-03 15:38:16 +01:00
de77af23d7 Nextcloud 22.2.3 2021-11-17 19:05:19 +01:00
aa86dd1770 Nextcloud 22.2.2 2021-11-13 19:47:27 +01:00
ce7b954126 Nextcloud 22.2.1 2021-11-11 21:33:20 +01:00
8b182c24d7 Nextcloud 22.2.0 2021-10-01 06:02:16 +02:00
890f265ee5 Nextcloud 22.1.1 2021-09-01 15:07:17 +02:00
92b85ec4bd Nextcloud 22.1.0 2021-08-06 01:55:21 +03:00
18de31bfa8 add note regarding build caching 2021-07-25 17:57:32 +02:00
a560f31d70 Nextcloud 22.0.0 2021-07-23 01:22:44 +02:00
ea2520a39f Nextcloud 21.0.3 2021-07-01 15:05:21 +02:00
50bcb0eaae Alpine 3.14 2021-06-27 18:04:49 +02:00
1d62c2a0c7 Create SECURITY.md 2021-06-13 14:39:33 +02:00
7bf8e7c66b versioning strategy for PHP/nginx
This way security fixes can be applied automatically when the image is rebuilt, and there's less maintenance to do. If you're building yourself, make sure to build without cache if you attempt to apply fixes.
2021-06-07 00:31:57 +02:00