feat: add default compression and cache config

add gzip config
add strict asset cache configs
update nginx-proxy image version

Author: FRSgit

README.md

@@ -1,2 +1,28 @@
 # nginx-proxy
+
 Repository for dockerized nginx proxy deployable on VPS
+
+> Important
+> When updating nginx-proxy, always update `nginx.tmpl` file as well. Instructions on how to do that are in "Working with nginx.tmpl" section below.
+
+## Working with nginx.tmpl
+
+1. Create `nginx.new.tmpl` file and copy over [`nginx.tmpl` content from `nginx-proxy` repo](https://github.com/nginx-proxy/nginx-proxy/blob/main/nginx.tmpl) into it and `nginx.tmpl` in this repo.
+
+2. Apply changes from `nginx.tmpl.patch` into `nginx.tmpl`.
+
+```bash
+patch nginx.tmpl nginx.tmpl.patch
+```
+
+> If the command above does not work it's possible that contents of `nginx.tmpl` have changed in new version of `nginx-proxy`. In such case you'll need to apply those changes manually.
+
+3. Make other changes you need in `nginx.tmpl` file.
+
+4. Generate a new `.patch` file.
+
+```bash
+diff -u nginx.new.tmpl nginx.tmpl > nginx.tmpl.patch
+```
+
+5. Now you can safely remove `nginx.new.tmpl` file.

conf.d/compression.conf

@@ -0,0 +1,124 @@
+# ----------------------------------------------------------------------
+# | Compression                                                        |
+# ----------------------------------------------------------------------
+
+# Brotli
+# https://github.com/google/ngx_brotli?tab=readme-ov-file#configuration-directives
+# brotli on;
+
+# Compression level (1-11).
+# We do not change the default compression level, which is 6.
+# Default: 6
+# brotli_comp_level 6;
+
+# Don't compress anything that's already small and unlikely to shrink much if at
+# all.
+# Default: 20
+# brotli_min_length 256;
+
+# Compress all output labeled with one of the following MIME-types.
+# `text/html` is always compressed by gzip module.
+# Default: text/html
+# brotli_types
+#   application/atom+xml
+#   application/geo+json
+#   application/javascript
+#   application/x-javascript
+#   application/json
+#   application/ld+json
+#   application/manifest+json
+#   application/rdf+xml
+#   application/rss+xml
+#   application/vnd.ms-fontobject
+#   application/wasm
+#   application/x-web-app-manifest+json
+#   application/xhtml+xml
+#   application/xml
+#   font/eot
+#   font/otf
+#   font/ttf
+#   image/bmp
+#   image/svg+xml
+#   image/vnd.microsoft.icon
+#   image/x-icon
+#   text/cache-manifest
+#   text/calendar
+#   text/css
+#   text/javascript
+#   text/markdown
+#   text/plain
+#   text/xml
+#   text/vcard
+#   text/vnd.rim.location.xloc
+#   text/vtt
+#   text/x-component
+#   text/x-cross-domain-policy;
+
+# gzip
+# https://docs.nginx.com/nginx/admin-guide/dynamic-modules/brotli/
+
+# Enable gzip compression.
+# Default: off
+gzip on;
+
+# Compression level (1-9).
+# 5 is a perfect compromise between size and CPU usage, offering about 75%
+# reduction for most ASCII files (almost identical to level 9).
+# Default: 1
+gzip_comp_level 5;
+
+# Don't compress anything that's already small and unlikely to shrink much if at
+# all (the default is 20 bytes, which is bad as that usually leads to larger
+# files after gzipping).
+# Default: 20
+gzip_min_length 256;
+
+# Compress data even for clients that are connecting to us via proxies,
+# identified by the "Via" header (required for CloudFront).
+# Default: off
+gzip_proxied any;
+
+# Tell proxies to cache both the gzipped and regular version of a resource
+# whenever the client's Accept-Encoding capabilities header varies;
+# Avoids the issue where a non-gzip capable client (which is extremely rare
+# today) would display gibberish if their proxy gave them the gzipped version.
+# Default: off
+gzip_vary on;
+
+# Compress all output labeled with one of the following MIME-types.
+# `text/html` is always compressed by gzip module.
+# Default: text/html
+gzip_types
+  application/atom+xml
+  application/geo+json
+  application/javascript
+  application/x-javascript
+  application/json
+  application/ld+json
+  application/manifest+json
+  application/rdf+xml
+  application/rss+xml
+  application/vnd.ms-fontobject
+  application/wasm
+  application/x-web-app-manifest+json
+  application/xhtml+xml
+  application/xml
+  font/eot
+  font/otf
+  font/ttf
+  image/bmp
+  image/svg+xml
+  image/vnd.microsoft.icon
+  image/x-icon
+  text/cache-manifest
+  text/calendar
+  text/css
+  text/javascript
+  text/markdown
+  text/plain
+  text/xml
+  text/vcard
+  text/vnd.rim.location.xloc
+  text/vtt
+  text/x-component
+  text/x-cross-domain-policy;

docker-compose.yml

@@ -7,16 +7,16 @@ version: '2'
 
 services:
   nginx-proxy:
-    image: nginxproxy/nginx-proxy:1.3.1-alpine
     container_name: nginx-proxy
+    build:
+      context: .
+      dockerfile: docker/nginx-proxy/Dockerfile
     environment:
       TRUST_DOWNSTREAM_PROXY: "false"
     ports:
       - "80:80"
       - "443:443"
     volumes:
-      - conf:/etc/nginx/conf.d
-      - vhost:/etc/nginx/vhost.d
       - html:/usr/share/nginx/html
       - certs:/etc/nginx/certs:ro
       - /var/run/docker.sock:/tmp/docker.sock:ro
@@ -48,8 +48,6 @@ services:
       - nginx-proxy
 
 volumes:
-  conf:
-  vhost:
   html:
   certs:
   acme:

docker/nginx-proxy/Dockerfile

@@ -0,0 +1,4 @@
+FROM nginxproxy/nginx-proxy:1.5.1-alpine
+
+COPY conf.d/* /etc/nginx/conf.d/
+COPY nginx.tmpl /app/