diff --git a/project.md b/project.md index 7eb13f7..c6e0d88 100644 --- a/project.md +++ b/project.md @@ -1,17 +1,18 @@ -${{ content_synopsis }} This image will serve as a base for nginx related images that need a high-performance webserver. The default tag of this image is stripped for most functions that can be used by a reverse proxy in front of nginx, it adds however important webserver functions like brotli compression. The default tag is not meant to run as a reverse proxy, use the full image for that. The default tag does not support HTTPS for instance! +${{ content_synopsis }} This image will serve as a base for nginx related images that need a high-performance webserver. The default tag of this image is stripped for most functions that can be used by a reverse proxy in front of nginx, it adds however important webserver functions like brotli compression. The default tag is not meant to run as a reverse proxy, use the full image for that. **The default tag does not support HTTPS for instance!** -${{ content_uvp }} Good question! All the other images on the market that do exactly the same don’t do or offer these options: +${{ content_uvp }} Good question! Because ... ${{ github:> [!IMPORTANT] }} -${{ github:> }}* This image runs as 1000:1000 by default, most other images run everything as root -${{ github:> }}* This image has no shell since it is 100% distroless, most other images run on a distro like Debian or Alpine with full shell access (security) -${{ github:> }}* This image does not ship with any critical or high rated CVE and is automatically maintained via CI/CD, most other images mostly have no CVE scanning or code quality tools in place -${{ github:> }}* This image is created via a secure, pinned CI/CD process and immune to upstream attacks, most other images have upstream dependencies that can be exploited -${{ github:> }}* This image contains a proper health check that verifies the app is actually working, most other images have either no health check or only check if a port is open or ping works -${{ github:> }}* This image works as read-only, most other images need to write files to the image filesystem -${{ github:> }}* This image is a lot smaller than most other images +${{ github:> }}* ... this image runs [rootless](https://github.com/11notes/RTFM/blob/main/linux/container/image/rootless.md) as 1000:1000 +${{ github:> }}* ... this image has no shell since it is [distroless](https://github.com/11notes/RTFM/blob/main/linux/container/image/distroless.md) +${{ github:> }}* ... this image is auto updated to the latest version via CI/CD +${{ github:> }}* ... this image has a health check +${{ github:> }}* ... this image runs read-only +${{ github:> }}* ... this image is automatically scanned for CVEs before and after publishing +${{ github:> }}* ... this image is created via a secure and pinned CI/CD process +${{ github:> }}* ... this image is very small -If you value security, simplicity and the ability to interact with the maintainer and developer of an image. Using my images is a great start in that direction. +If you value security, simplicity and optimizations to the extreme, then this image might be for you. ${{ content_comparison }}