bci/nginx

Deployment configuration settings

Those are defined as environment variables and typically do not need to change during runtime. For a detailed description on how to configure the container, please refer to Usage Guide - Nginx Docker Image.

Here, only the configuration settings that may need to be changed are listed.

Table 1. Configuration settings that may need to be changed
Environment Variable	Description	Default Value
NGINX_TLS_ENABLE	Whether to enable calling the service via HTTPS.	true
APP_TLS_ENABLE	Whether to enable forwarding the calls to downstream services via HTTPS.	true
NGINX_LOG_LEVEL	The minimum logging level for generated logs.	info
NGINX_IPV6_DISABLE	Whether to disable support for IPv6.	false
NGINX_HEADER_SIZE	HTTP header size limit. Recommended value is 8k.	1k
NGINX_WAF_DISABLE	Whether to disable Modsecurity web application firewall. It is installed and enabled by default in the image if TLS is enabled. Rules can be customized by placing customization files in /etc/nginx/modsec/custom directory according to the modsecurity.	false
NGINX_RESOLVER	The DNS resolver to use for resolving external URLs. Typically shall be set to "kube-dns.kube-system.svc.cluster.local ipv6=off" for Kubernetes deployments.