Skip to content

Commit 219e2d9

Browse files
dkleinF5dkleinF5
committed
updated jwt location
1 parent 4bc1b28 commit 219e2d9

File tree

13 files changed

+393
-10
lines changed

13 files changed

+393
-10
lines changed

‎content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/alpine-plus.md‎

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
nd-files:
3+
- content/waf/install/docker.md
4+
- content/waf/install/kubernetes.md
5+
---
6+
7+
```dockerfile
8+
# syntax=docker/dockerfile:1
9+
10+
# Supported OS_VER's are 3.22
11+
ARG OS_VER="3.22"
12+
13+
# Base image
14+
FROM alpine:${OS_VER}
15+
16+
# Install NGINX Plus and F5 WAF for NGINX v5 module
17+
RUN --mount=type=secret,id=nginx-crt,dst=/etc/apk/cert.pem,mode=0644 \
18+
--mount=type=secret,id=nginx-key,dst=/etc/apk/cert.key,mode=0644 \
19+
wget -O /etc/apk/keys/nginx_signing.rsa.pub https://cs.nginx.com/static/keys/nginx_signing.rsa.pub \
20+
&& printf "https://pkgs.nginx.com/plus/alpine/v`egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release`/main\n" | \
21+
tee -a /etc/apk/repositories \
22+
&& printf "https://pkgs.nginx.com/app-protect-x-plus/alpine/v`egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release`/main\n" | \
23+
tee -a /etc/apk/repositories \
24+
&& apk update \
25+
&& apk add app-protect-module-plus \
26+
&& ln -sf /dev/stdout /var/log/nginx/access.log \
27+
&& ln -sf /dev/stderr /var/log/nginx/error.log \
28+
&& rm -rf /var/cache/apk/*
29+
30+
# Expose port
31+
EXPOSE 80
32+
33+
# Define stop signal
34+
STOPSIGNAL SIGQUIT
35+
36+
# Set default command
37+
CMD ["nginx", "-g", "daemon off;"]
38+
```

‎content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/amazon-plus.md‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
---
2+
nd-files:
3+
- content/waf/install/docker.md
4+
- content/waf/install/kubernetes.md
5+
---
6+
7+
```dockerfile
8+
# syntax=docker/dockerfile:1
9+
10+
# Base image
11+
FROM amazonlinux:2023
12+
13+
# Install NGINX Plus and F5 WAF for NGINX v5 module
14+
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
15+
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
16+
yum -y install wget ca-certificates shadow-utils \
17+
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/plus-amazonlinux2023.repo \
18+
&& echo "[app-protect-x-plus]" > /etc/yum.repos.d/app-protect-plus.repo \
19+
&& echo "name=nginx-app-protect repo" >> /etc/yum.repos.d/app-protect-plus.repo \
20+
&& echo "baseurl=https://pkgs.nginx.com/app-protect-x-plus/amzn/2023/\$basearch/" >> /etc/yum.repos.d/app-protect-plus.repo \
21+
&& echo "sslclientcert=/etc/ssl/nginx/nginx-repo.crt" >> /etc/yum.repos.d/app-protect-plus.repo \
22+
&& echo "sslclientkey=/etc/ssl/nginx/nginx-repo.key" >> /etc/yum.repos.d/app-protect-plus.repo \
23+
&& echo "gpgcheck=0" >> /etc/yum.repos.d/app-protect-plus.repo \
24+
&& echo "enabled=1" >> /etc/yum.repos.d/app-protect-plus.repo \
25+
&& yum -y install app-protect-module-plus \
26+
&& yum clean all \
27+
&& rm -rf /var/cache/yum \
28+
&& ln -sf /dev/stdout /var/log/nginx/access.log \
29+
&& ln -sf /dev/stderr /var/log/nginx/error.log
30+
31+
# Expose port
32+
EXPOSE 80
33+
34+
# Define stop signal
35+
STOPSIGNAL SIGQUIT
36+
37+
# Set default command
38+
CMD ["nginx", "-g", "daemon off;"]
39+
```

‎content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/debian-plus.md‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
---
2+
nd-files:
3+
- content/waf/install/docker.md
4+
- content/waf/install/kubernetes.md
5+
---
6+
7+
```dockerfile
8+
# syntax=docker/dockerfile:1
9+
10+
# Supported OS_CODENAME's are: bullseye/bookworm
11+
ARG OS_CODENAME=bookworm
12+
13+
# Base image
14+
FROM debian:${OS_CODENAME}
15+
16+
# Install NGINX Plus and F5 WAF for NGINX v5 module
17+
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
18+
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
19+
apt-get update \
20+
&& apt-get install -y \
21+
apt-transport-https \
22+
lsb-release \
23+
ca-certificates \
24+
wget \
25+
gnupg2 \
26+
debian-archive-keyring \
27+
&& wget -qO - https://cs.nginx.com/static/keys/nginx_signing.key | \
28+
gpg --dearmor | tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null \
29+
&& gpg --dry-run --quiet --no-keyring --import --import-options import-show /usr/share/keyrings/nginx-archive-keyring.gpg \
30+
&& printf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
31+
https://pkgs.nginx.com/plus/debian `lsb_release -cs` nginx-plus\n" | \
32+
tee /etc/apt/sources.list.d/nginx-plus.list \
33+
&& printf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
34+
https://pkgs.nginx.com/app-protect-x-plus/debian `lsb_release -cs` nginx-plus\n" | \
35+
tee /etc/apt/sources.list.d/nginx-app-protect.list \
36+
&& wget -P /etc/apt/apt.conf.d https://cs.nginx.com/static/files/90pkgs-nginx \
37+
&& apt-get update \
38+
&& DEBIAN_FRONTEND="noninteractive" apt-get install -y app-protect-module-plus \
39+
&& ln -sf /dev/stdout /var/log/nginx/access.log \
40+
&& ln -sf /dev/stderr /var/log/nginx/error.log \
41+
&& apt-get clean \
42+
&& rm -rf /var/lib/apt/lists/*
43+
44+
# Expose port
45+
EXPOSE 80
46+
47+
# Define stop signal
48+
STOPSIGNAL SIGQUIT
49+
50+
# Set default command
51+
CMD ["nginx", "-g", "daemon off;"]
52+
```

‎content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/oracle-plus.md‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
---
2+
nd-files:
3+
- content/waf/install/docker.md
4+
- content/waf/install/kubernetes.md
5+
---
6+
7+
```dockerfile
8+
# syntax=docker/dockerfile:1
9+
10+
# Base image
11+
FROM oraclelinux:8
12+
13+
# Install NGINX Plus and F5 WAF for NGINX v5 module
14+
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
15+
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
16+
dnf -y install wget ca-certificates yum-utils \
17+
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/nginx-plus-8.repo \
18+
&& echo "[app-protect-x-plus]" > /etc/yum.repos.d/app-protect-8-x-plus.repo \
19+
&& echo "name=nginx-app-protect repo" >> /etc/yum.repos.d/app-protect-8-x-plus.repo \
20+
&& echo "baseurl=https://pkgs.nginx.com/app-protect-x-plus/centos/8/\$basearch/" >> /etc/yum.repos.d/app-protect-8-x-plus.repo \
21+
&& echo "sslclientcert=/etc/ssl/nginx/nginx-repo.crt" >> /etc/yum.repos.d/app-protect-8-x-plus.repo \
22+
&& echo "sslclientkey=/etc/ssl/nginx/nginx-repo.key" >> /etc/yum.repos.d/app-protect-8-x-plus.repo \
23+
&& echo "gpgcheck=0" >> /etc/yum.repos.d/app-protect-8-x-plus.repo \
24+
&& echo "enabled=1" >> /etc/yum.repos.d/app-protect-8-x-plus.repo \
25+
&& dnf clean all \
26+
&& dnf -y install app-protect-module-plus \
27+
&& dnf clean all \
28+
&& rm -rf /var/cache/dnf \
29+
&& ln -sf /dev/stdout /var/log/nginx/access.log \
30+
&& ln -sf /dev/stderr /var/log/nginx/error.log
31+
32+
# Expose port
33+
EXPOSE 80
34+
35+
# Define stop signal
36+
STOPSIGNAL SIGQUIT
37+
38+
# Set default command
39+
CMD ["nginx", "-g", "daemon off;"]
40+
```

‎content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/rhel8-plus.md‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
---
2+
nd-files:
3+
- content/waf/install/docker.md
4+
- content/waf/install/kubernetes.md
5+
---
6+
7+
```dockerfile
8+
# syntax=docker/dockerfile:1
9+
10+
# Supported UBI_VERSION's are 7/8/9
11+
ARG UBI_VERSION=8
12+
13+
# Base Image
14+
FROM registry.access.redhat.com/ubi${UBI_VERSION}/ubi
15+
16+
# Define the ARG again after FROM to use it in this stage
17+
ARG UBI_VERSION
18+
19+
# Install NGINX Plus and F5 WAF for NGINX v5 module
20+
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
21+
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
22+
PKG_MANAGER=dnf; \
23+
if [ "${UBI_VERSION}" = "7" ]; then \
24+
PKG_MANAGER=yum; \
25+
NGINX_PLUS_REPO="nginx-plus-7.4.repo"; \
26+
elif [ "${UBI_VERSION}" = "9" ]; then \
27+
NGINX_PLUS_REPO="plus-${UBI_VERSION}.repo"; \
28+
else \
29+
NGINX_PLUS_REPO="nginx-plus-${UBI_VERSION}.repo"; \
30+
fi \
31+
&& $PKG_MANAGER -y install wget ca-certificates \
32+
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/dependencies.repo \
33+
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/${NGINX_PLUS_REPO} \
34+
&& echo "[app-protect-x-plus]" > /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
35+
&& echo "name=nginx-app-protect repo" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
36+
&& echo "baseurl=https://pkgs.nginx.com/app-protect-x-plus/centos/${UBI_VERSION}/\$basearch/" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
37+
&& echo "sslclientcert=/etc/ssl/nginx/nginx-repo.crt" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
38+
&& echo "sslclientkey=/etc/ssl/nginx/nginx-repo.key" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
39+
&& echo "gpgcheck=0" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
40+
&& echo "enabled=1" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
41+
&& $PKG_MANAGER clean all \
42+
&& $PKG_MANAGER install -y app-protect-module-plus \
43+
&& $PKG_MANAGER clean all \
44+
&& rm -rf /var/cache/$PKG_MANAGER \
45+
&& ln -sf /dev/stdout /var/log/nginx/access.log \
46+
&& ln -sf /dev/stderr /var/log/nginx/error.log
47+
48+
# Expose port
49+
EXPOSE 80
50+
51+
# Define stop signal
52+
STOPSIGNAL SIGQUIT
53+
54+
# Set default command
55+
CMD ["nginx", "-g", "daemon off;"]
56+
```

‎content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/rhel9-plus.md‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
---
2+
nd-files:
3+
- content/waf/install/docker.md
4+
- content/waf/install/kubernetes.md
5+
---
6+
7+
```dockerfile
8+
# syntax=docker/dockerfile:1
9+
10+
# Base Image
11+
FROM rockylinux:9
12+
13+
# Install NGINX Plus and F5 WAF for NGINX v5 module
14+
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
15+
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
16+
dnf -y install wget ca-certificates \
17+
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/dependencies.repo \
18+
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/${NGINX_PLUS_REPO} \
19+
&& echo "[app-protect-x-plus]" > /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
20+
&& echo "name=nginx-app-protect repo" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
21+
&& echo "baseurl=https://pkgs.nginx.com/app-protect-x-plus/centos/${UBI_VERSION}/\$basearch/" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
22+
&& echo "sslclientcert=/etc/ssl/nginx/nginx-repo.crt" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
23+
&& echo "sslclientkey=/etc/ssl/nginx/nginx-repo.key" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
24+
&& echo "gpgcheck=0" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
25+
&& echo "enabled=1" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
26+
&& dnf clean all \
27+
&& dnf install -y app-protect-module-plus \
28+
&& dnf clean all \
29+
&& rm -rf /var/cache/dnf \
30+
&& ln -sf /dev/stdout /var/log/nginx/access.log \
31+
&& ln -sf /dev/stderr /var/log/nginx/error.log
32+
33+
# Expose port
34+
EXPOSE 80
35+
36+
# Define stop signal
37+
STOPSIGNAL SIGQUIT
38+
39+
# Set default command
40+
CMD ["nginx", "-g", "daemon off;"]
41+
```

‎content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/rocky9-plus.md‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
---
2+
nd-files:
3+
- content/waf/install/docker.md
4+
- content/waf/install/kubernetes.md
5+
---
6+
7+
```dockerfile
8+
# syntax=docker/dockerfile:1
9+
10+
# Base Image
11+
FROM rockylinux:9
12+
13+
# Install NGINX Plus and F5 WAF for NGINX v5 module
14+
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
15+
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
16+
dnf -y install wget ca-certificates \
17+
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/dependencies.repo \
18+
&& wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/${NGINX_PLUS_REPO} \
19+
&& echo "[app-protect-x-plus]" > /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
20+
&& echo "name=nginx-app-protect repo" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
21+
&& echo "baseurl=https://pkgs.nginx.com/app-protect-x-plus/centos/${UBI_VERSION}/\$basearch/" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
22+
&& echo "sslclientcert=/etc/ssl/nginx/nginx-repo.crt" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
23+
&& echo "sslclientkey=/etc/ssl/nginx/nginx-repo.key" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
24+
&& echo "gpgcheck=0" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
25+
&& echo "enabled=1" >> /etc/yum.repos.d/app-protect-${UBI_VERSION}-x-plus.repo \
26+
&& dnf clean all \
27+
&& dnf install -y app-protect-module-plus \
28+
&& dnf clean all \
29+
&& rm -rf /var/cache/dnf \
30+
&& ln -sf /dev/stdout /var/log/nginx/access.log \
31+
&& ln -sf /dev/stderr /var/log/nginx/error.log
32+
33+
# Expose port
34+
EXPOSE 80
35+
36+
# Define stop signal
37+
STOPSIGNAL SIGQUIT
38+
39+
# Set default command
40+
CMD ["nginx", "-g", "daemon off;"]
41+
```

‎content/includes/waf/dockerfiles/nginx-plus-without-jwt-mount/ubuntu-plus.md‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
---
2+
nd-files:
3+
- content/waf/install/docker.md
4+
- content/waf/install/kubernetes.md
5+
---
6+
7+
```dockerfile
8+
# syntax=docker/dockerfile:1
9+
10+
# Supported OS_CODENAME's are: focal/jammy
11+
ARG OS_CODENAME=jammy
12+
13+
# Base image
14+
FROM ubuntu:${OS_CODENAME}
15+
16+
# Install NGINX Plus and F5 WAF for NGINX v5 module
17+
RUN --mount=type=secret,id=nginx-crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode=0644 \
18+
--mount=type=secret,id=nginx-key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
19+
apt-get update \
20+
&& apt-get install -y \
21+
apt-transport-https \
22+
lsb-release \
23+
ca-certificates \
24+
wget \
25+
gnupg2 \
26+
ubuntu-keyring \
27+
&& wget -qO - https://cs.nginx.com/static/keys/nginx_signing.key | \
28+
gpg --dearmor | tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null \
29+
&& gpg --dry-run --quiet --no-keyring --import --import-options import-show /usr/share/keyrings/nginx-archive-keyring.gpg \
30+
&& printf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
31+
https://pkgs.nginx.com/plus/ubuntu `lsb_release -cs` nginx-plus\n" | \
32+
tee /etc/apt/sources.list.d/nginx-plus.list \
33+
&& printf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
34+
https://pkgs.nginx.com/app-protect-x-plus/ubuntu `lsb_release -cs` nginx-plus\n" | \
35+
tee /etc/apt/sources.list.d/nginx-app-protect.list \
36+
&& wget -P /etc/apt/apt.conf.d https://cs.nginx.com/static/files/90pkgs-nginx \
37+
&& apt-get update \
38+
&& DEBIAN_FRONTEND="noninteractive" apt-get install -y app-protect-module-plus \
39+
&& ln -sf /dev/stdout /var/log/nginx/access.log \
40+
&& ln -sf /dev/stderr /var/log/nginx/error.log \
41+
&& apt-get clean \
42+
&& rm -rf /var/lib/apt/lists/*
43+
44+
# Expose port
45+
EXPOSE 80
46+
47+
# Define stop signal
48+
STOPSIGNAL SIGQUIT
49+
50+
# Set default command
51+
CMD ["nginx", "-g", "daemon off;"]
52+
```

‎content/waf/install/disconnected-environment.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,10 @@ yum install --downloadonly --downloaddir=/etc/packages/ app-protect
8989

9090
Once you've obtained the package files and transferred them to your disconnected environment, you can directly install them or add them to a local repository.
9191

92+
## Configure license reporting for disconnected environments
93+
94+
By default, NGINX Plus automatically reports license usage to the F5 licensing endpoint, and additional configuration is not required in connected environments. However, manual configuration becomes necessary in disconnected environments. Use NGINX Instance Manager for usage reporting or use a custom path for the license file. Configuration can be done in the [`mgmt {}`](https://nginx.org/en/docs/ngx_mgmt_module.html) block of the NGINX Plus configuration file (`/etc/nginx/nginx.conf`). For more information, see [About Subscription Licenses]({{< ref "/solutions/about-subscription-licenses.md">}}).
95+
9296
## Download Docker images
9397

9498
After pulling or building Docker images in a connected environment, you can save them to `.tar` files:

0 commit comments

Comments
 (0)