Requirements

Usage

git clone https://github.com/metowolf/docker-lemp.git

cd docker-lempcp .env.example .envcp docker-compose.example.yml docker-compose.yml

MYSQL_ROOT_PASSWORD=your_password

docker-compose up -d

RunningQUIC

http {server {# Enable QUIC, HTTP/3 and HTTP/2 on both IPv4 and IPv6.listen443 ssl http2;listen443 quic;listen [::]:443 ssl http2;listen [::]:443 quic;ssl_certificate      cert.crt;ssl_certificate_key  cert.key;# Add HSTS headeradd_header Strict-Transport-Security"max-age=31536000; includeSubDomains; preload" always;# Add Alt-Svc header to negotiate HTTP/3.add_header alt-svc'h3-23=":443"; ma=86400';# Enable specific TLS versions (TLSv1 and TLSv1.1 are not longer saft, TLSv1.3 is required for QUIC).ssl_protocols TLSv1.2 TLSv1.3;ssl_ciphers TLS-CHACHA20-POLY1305-SHA256:TLS-AES-256-GCM-SHA384:TLS-AES-128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256;ssl_prefer_server_ciphers on;ssl_early_data on;    }}

Runningbrotli

brotli on;brotli_comp_level 6;brotli_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript image/svg+xml;

Generally Upgrade

vim .env

docker-compose up -d --no-deps --build

Upgrade toCaddyless version

Beforegit pull

mv etc/nginx/nginx.conf etc/nginx/nginx.conf.bak

Aftergit pull

vim .env

# move nginx configurationmv etc/nginx/config/* etc/nginx/conf.d/# move MySQL configurationrm -fr etc/mysql&& mkdir etc/mysql&& mkdir etc/mysql/my.cnf.dmv etc/database/data etc/mysql&& mv etc/database/config/* etc/mysql/my.cnf.d# move SSL configurationmv etc/ssl etc/nginx

docker-compose up -d --no-deps --build --remove-orphans