imgproxy VS BunkerWeb

We use imgproxy which does 2->4 and all you need to do is change the URL on your site.

imgproxy interactive demo

You should also be using a variety of formats. Unless you need support for old browsers and transparency in the same image, don't use PNG. Stick with jpg, webp and avif. You can setup something like imgproxy to automatically resize and change format of images, or even fit into the space requirements you set.

If you look for something universal, you can try API for image optimization (e.g. imgproxy). However, the mechanism is different from build-time optimization.

Hey everyone, seeking some feedback about how to improve our project, imgproxy, an open source image processing tool.It’s designed to reduce costs and remove pricey requirements for all saved images to conform to specific formats. You can read the full list here if you’re curious: https://github.com/imgproxy/imgproxy In addition to crucial image processing stuff (like resizing, cropping, rotating), it can also sign urls, add watermarks, and a ton of other things.A ton of developers use it, and that’s great. We’re trying to improve it further, so wanted to put out the feelers and see if there is anyone using it (or a similar tool) who could suggest some additional features (or tell about the essential features of your current image processing tool).

Now signup for Vultr and make a $5 instance and put imgproxy on it. Setup a subdomain for images in Cloudflare and point it to the imgproxy IP.

Keep in mind that integrating a WAF can render certain apps not working if the security configuration is set too paranoid. There are a lot of examples for apps that might be affected, though.

Its documentation is nice as well. You can also find them on Discord and the GitHub repo is also pretty clean and have many example configurations there.

This also effectively allows your killswitch to be Nginx on the VPS while still allowing local network traffic at home. You can take it a step further and geoblock countries and more with https://github.com/bunkerity/bunkerweb.

I know you asked about Nginx vs Caddy but to throw another one into the mix have a look at BunkerWeb. I only started using it within the last couple of months but it's based on Nginx with a tonne of usability and security improvements. I now use BunkerWeb to expose services externally and Traefik internally.

Creating a new discussion here doesn't seem to be an option (doesn't allow me to do so) so I came here.

There's also a security optimized NGINX image called BunkerWeb. It has a WAF builtin and an optional web interface.

Right now I'm doing a similar setup but I want to use NGINX with integrated WAF.

Bunkerised nginx comes me in mind here https://github.com/bunkerity/bunkerized-nginx