Nginx 1.29.2 and BotBlocker V4.2025.10.5514

Author: tiredofit

.github/workflows/build_manual.yml

@@ -3,23 +3,19 @@ name: "MANUAL - Build all images"
 on:
   workflow_dispatch:
     inputs:
-      Manual Build:
+      Manual_Build:
         description: 'Manual Build'
         required: false
 
 jobs:
   prepare:
     uses: nfrastack/gha/.github/workflows/artifacts-encrypt.yml@main
     secrets: inherit
-  alpine:
+  build:
     needs: prepare
-    uses: ./.github/workflows/distro_alpine.yml
-    secrets: inherit
-  debian:
-    needs: prepare
-    uses: ./.github/workflows/distro_debian.yml
+    uses: ./.github/workflows/image_build.yml
     secrets: inherit
   cleanup:
-    needs: [alpine, debian]
+    needs: [build]
     uses: nfrastack/gha/.github/workflows/artifacts-remove.yml@main
     secrets: inherit

.github/workflows/build_push.yml

@@ -12,16 +12,12 @@ jobs:
   prepare:
     uses: nfrastack/gha/.github/workflows/artifacts-encrypt.yml@main
     secrets: inherit
-  alpine:
+  build:
     needs: prepare
-    uses: ./.github/workflows/distro_alpine.yml
-    secrets: inherit
-  debian:
-    needs: prepare
-    uses: ./.github/workflows/distro_debian.yml
+    uses: ./.github/workflows/image_build.yml
     secrets: inherit
   cleanup:
-    needs: [alpine, debian]
+    needs: [build]
     uses: nfrastack/gha/.github/workflows/artifacts-remove.yml@main
     secrets: inherit
 

.github/workflows/distro_alpine.yml

@@ -0,0 +1,44 @@
+name: alpine
+
+on:
+  workflow_call
+
+jobs:
+  build_alpine:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    strategy:
+      matrix:
+        build:
+          - { distro: "alpine", distro_variant: "3.22", latest: "true", distro_latest: "true", arch: "linux/amd64,linux/arm64" }
+          - { distro: "alpine", distro_variant: "3.19", latest: "false", distro_latest: "false", arch: "linux/amd64,linux/arm64" }
+          - { distro: "alpine", distro_variant: "3.16", latest: "false", distro_latest: "false", arch: "linux/amd64",linux/arm64" }
+          - { distro: "alpine", distro_variant: "3.15", latest: "false", distro_latest: "false", arch: "linux/amd64",linux/arm64" }
+          - { distro: "alpine", distro_variant: "3.12", latest: "false", distro_latest: "false", arch: "linux/amd64",linux/arm64" }
+          - { distro: "debian", distro_variant: "trixie", latest: "false", distro_latest: "true", arch: "linux/amd64,linux/arm64" }
+          - { distro: "debian", distro_variant: "bookworm", latest: "false", distro_latest: "false", arch: "linux/amd64,linux/arm64" }
+        image_variant:
+          - core
+          - faflopza
+          - faflopzaze
+    env:
+      BASE_IMAGE: "ghcr.io/nfrastack/container-base"
+      DISTRO: ${{ matrix.build.distro }}
+      DISTRO_VARIANT: ${{ matrix.build.distro_variant }}
+      DISTRO_LATEST: ${{ matrix.build.distro_latest || 'false' }}
+      IMAGE_VARIANT: ${{ matrix.image_variant }}
+      ARCH: ${{ matrix.build.arch || 'linux/amd64,linux/arm64' }}
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v5
+      - name: Download Encrypted Files
+        uses: actions/download-artifact@v4
+        with:
+          name: encrypted-artifacts
+          path: ./
+      - name: Build Image
+        uses: nfrastack/gha/.github/actions/build_multi_image@main
+        with:
+          docker_username: ${{ secrets.DOCKER_USERNAME }}
+          docker_password: ${{ secrets.DOCKER_PASSWORD }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/distro_debian.yml

@@ -2,9 +2,10 @@
 #
 # SPDX-License-Identifier: MIT
 
-ARG BASE_IMAGE
-ARG DISTRO
-ARG DISTRO_VARIANT
+ARG \
+    BASE_IMAGE \
+    DISTRO \
+    DISTRO_VARIANT
 
 FROM ${BASE_IMAGE}:${DISTRO}_${DISTRO_VARIANT}
 
@@ -19,12 +20,12 @@ LABEL \
         org.opencontainers.image.licenses="MIT"
 
 ARG \
-        NGINX_VERSION="release-1.29.1" \
+        NGINX_VERSION="release-1.29.2" \
         NGINX_REPO_URL="https://github.com/nginx/nginx" \
         NGINX_MODULE_AUTH_LDAP_REPO_URL="https://github.com/kvspb/nginx-auth-ldap" \
         NGINX_MODULE_AUTH_LDAP_VERSION="241200eac8e4acae74d353291bd27f79e5ca3dc4" \
         NGINX_MODULE_BLOCK_BOTS_REPO_URL="https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker" \
-        NGINX_MODULE_BLOCK_BOTS_VERSION="V4.2025.09.5442" \
+        NGINX_MODULE_BLOCK_BOTS_VERSION="V4.2025.10.5514" \
         NGINX_MODULE_BROTLI_REPO_URL="https://github.com/google/ngx_brotli" \
         NGINX_MODULE_BROTLI_VERSION="a71f9312c2deb28875acc7bacfdd5695a111aa53" \
         NGINX_MODULE_COOKIE_FLAG_REPO_URL="https://github.com/AirisX/nginx_cookie_flag_module" \

.github/workflows/image_build.yml

@@ -93,7 +93,7 @@ Example:
 `ghcr.io/nfrastack/container-nginx:alpine_3.22`
 
 * `latest` will be the most recent commit
-* An otpional `tag` may exist that matches the [CHANGELOG](CHANGELOG.md) - These are the safest
+* An optional `tag` may exist that matches the [CHANGELOG](CHANGELOG.md) - These are the safest
 * If it is built for multiple distributions there may exist a value of `alpine` or `debian`
 * If there are multiple distribution variations it may include a version - see the registry for availability