starred/docker-nginx-full
1
0
Fork 0
mirror of https://github.com/NginxProxyManager/docker-nginx-full.git synced 2026-04-24 22:55:58 +03:00
Code Issues 19 Projects Releases Packages Wiki Activity

[GH-ISSUE #9] Add Alpine Container #6

New issue
Open
opened 2026-02-27 14:58:05 +03:00 by kerem · 4 comments
kerem commented 2026-02-27 14:58:05 +03:00
Owner
Copy link

Originally created by @mpldr on GitHub (Apr 6, 2022).
Original GitHub issue: https://github.com/NginxProxyManager/docker-nginx-full/issues/9

NPM is pretty heavy, which can inflate the image store significantly when regularly updating it. An Alpine Container would probably reduce this issue significantly.

Originally created by @mpldr on GitHub (Apr 6, 2022). Original GitHub issue: https://github.com/NginxProxyManager/docker-nginx-full/issues/9 NPM is pretty heavy, which can inflate the image store significantly when regularly updating it. An Alpine Container would probably reduce this issue significantly.
kerem commented 2026-02-27 14:58:06 +03:00
Author
Owner
Copy link

@scottmando2000 commented on GitHub (Oct 20, 2022):

I second this, but for a different reason, security vulnerabilities. Alpine containers are already security focused.

I have just ran the latest version of nginx proxy manager through the Trivy container scanner to see that there are almost 1000 active CVE's in the project.

https://trivy.dev/results/?image=jc21/nginx-proxy-manager:latest

@jc21

<!-- gh-comment-id:1286243048 --> @scottmando2000 commented on GitHub (Oct 20, 2022): I second this, but for a different reason, security vulnerabilities. Alpine containers are already security focused. I have just ran the latest version of nginx proxy manager through the Trivy container scanner to see that there are almost 1000 active CVE's in the project. https://trivy.dev/results/?image=jc21/nginx-proxy-manager:latest @jc21
kerem commented 2026-02-27 14:58:06 +03:00
Author
Owner
Copy link

@jc21 commented on GitHub (Oct 20, 2022):

History lesson, NPM was using Alpine for most of it's life but it became unreliable and I can't exactly remember why but the history is hidden in an issue somewhere.. The next smallest solution was debian-slim. The base image is using debian:buster-slim and that probably could be changed to bullseye to get some updates to outdated packages.

<!-- gh-comment-id:1286249396 --> @jc21 commented on GitHub (Oct 20, 2022): History lesson, NPM was using Alpine for most of it's life but it became unreliable and I can't exactly remember why but the history is hidden in an issue somewhere.. The next smallest solution was debian-slim. The base image is using `debian:buster-slim` and that probably could be changed to `bullseye` to get some updates to outdated packages.
kerem commented 2026-02-27 14:58:06 +03:00
Author
Owner
Copy link

@scottmando2000 commented on GitHub (Oct 20, 2022):

Thanks for the response!

Moving to bullseye would probably be a good step, but would it be possible to have scheduled build to prevent latest from getting out of date?
I did see that the last publish date on the latest tag was 7 months ago, which is a bit concerning on the security side of things.

Thanks,
Scott

<!-- gh-comment-id:1286261120 --> @scottmando2000 commented on GitHub (Oct 20, 2022): Thanks for the response! Moving to `bullseye` would probably be a good step, but would it be possible to have scheduled build to prevent `latest` from getting out of date? I did see that the last publish date on the `latest` tag was 7 months ago, which is a bit concerning on the security side of things. Thanks, Scott
kerem commented 2026-02-27 14:58:06 +03:00
Author
Owner
Copy link

@hugopalma17 commented on GitHub (Sep 5, 2025):

Hmm, I just opened a thread for the same reason..

<!-- gh-comment-id:3257228626 --> @hugopalma17 commented on GitHub (Sep 5, 2025): Hmm, I just opened a thread for the same reason..
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
http3
certbot4
brotli
No results found.
Labels
Clear labels   
pull-request

Mirrored from GitHub Pull Request

No labels
pull-request
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-nginx-full#6
No description provided.