feat: Add imgproxy template (#714)

* feat: Add imgproxy template * fix: Configure docker-compose to match requirements * fix: Process meta * fix: Change logo name * fix: Remove incorrect mounts * fix: Expose 80 port instead of direct mapping * fix: Change nginx cache keys default zone size and correct format negotiation * fix: Escaping
2026-03-11 17:48:11 -05:00 · 2026-03-05 08:16:54 +01:00
parent 38e417b194
commit 4b2bc71f95
4 changed files with 169 additions and 18 deletions
--- a/blueprints/imgproxy/docker-compose.yml
+++ b/blueprints/imgproxy/docker-compose.yml
@@ -0,0 +1,76 @@
+version: "3.8"
+services:
+  imgproxy:
+    image: darthsim/imgproxy:v3.30.1
+    restart: unless-stopped
+    environment:
+      IMGPROXY_KEY: ${IMGPROXY_KEY}
+      IMGPROXY_SALT: ${IMGPROXY_SALT}
+      IMGPROXY_ENABLE_WEBP_DETECTION: ${IMGPROXY_ENABLE_WEBP_DETECTION:-true}
+      IMGPROXY_ENFORCE_WEBP: ${IMGPROXY_ENFORCE_WEBP:-true}
+      IMGPROXY_TTL: ${IMGPROXY_TTL:-30600}
+      IMGPROXY_DEVELOPMENT_ERRORS_MODE: ${IMGPROXY_DEVELOPMENT_ERRORS_MODE:-false}
+      IMGPROXY_READ_TIMEOUT: ${IMGPROXY_READ_TIMEOUT:-10}
+      IMGPROXY_WRITE_TIMEOUT: ${IMGPROXY_WRITE_TIMEOUT:-10}
+      IMGPROXY_KEEP_ALIVE_TIMEOUT: ${IMGPROXY_KEEP_ALIVE_TIMEOUT:-10}
+      IMGPROXY_DOWNLOAD_TIMEOUT: ${IMGPROXY_DOWNLOAD_TIMEOUT:-5}
+      IMGPROXY_CONCURRENCY: ${IMGPROXY_CONCURRENCY:-}
+      IMGPROXY_MAX_CLIENTS: ${IMGPROXY_MAX_CLIENTS:-10}
+      IMGPROXY_SO_REUSEPORT: ${IMGPROXY_SO_REUSEPORT:-}
+      IMGPROXY_USER_AGENT: ${IMGPROXY_USER_AGENT:-}
+      IMGPROXY_USE_ETAG: ${IMGPROXY_USE_ETAG:-true}
+      IMGPROXY_QUALITY: ${IMGPROXY_QUALITY:-80}
+      IMGPROXY_ALLOWED_SOURCES: ${IMGPROXY_ALLOWED_SOURCES}
+      IMGPROXY_ALLOW_ORIGIN: ${IMGPROXY_ALLOW_ORIGIN:-*}
+      IMGPROXY_MAX_SRC_FILE_SIZE: ${IMGPROXY_MAX_SRC_FILE_SIZE:-20971520}
+      IMGPROXY_MAX_SRC_RESOLUTION: ${IMGPROXY_MAX_SRC_RESOLUTION:-50}
+      IMGPROXY_LOG_LEVEL: ${IMGPROXY_LOG_LEVEL:-error}
+
+  nginx:
+    image: nginx:1.28.2-alpine
+    restart: unless-stopped
+    expose:
+      - 80
+    environment:
+      NGINX_CACHE_LEVELS: ${NGINX_CACHE_LEVELS:-1:2}
+      NGINX_CACHE_KEYS_ZONE_SIZE: ${NGINX_CACHE_KEYS_ZONE_SIZE:-32m}
+      NGINX_CACHE_MAX_SIZE: ${NGINX_CACHE_MAX_SIZE:-500m}
+      NGINX_CACHE_INACTIVE: ${NGINX_CACHE_INACTIVE:-30d}
+      NGINX_CACHE_USE_TEMP_PATH: ${NGINX_CACHE_USE_TEMP_PATH:-off}
+      NGINX_CACHE_EXPIRES: ${NGINX_CACHE_EXPIRES:-30d}
+    depends_on:
+      - imgproxy
+    volumes:
+      - nginx-cache:/tmp/cache
+    command:
+      - /bin/sh
+      - -c
+      - |
+        cat <<EOF > /etc/nginx/conf.d/default.conf
+        proxy_cache_path /tmp/cache levels=$${NGINX_CACHE_LEVELS} keys_zone=my_cache:$${NGINX_CACHE_KEYS_ZONE_SIZE} max_size=$${NGINX_CACHE_MAX_SIZE} inactive=$${NGINX_CACHE_INACTIVE} use_temp_path=$${NGINX_CACHE_USE_TEMP_PATH};
+
+        server {
+          listen 80 default_server;
+          listen [::]:80 default_server;
+
+          location / {
+            expires $${NGINX_CACHE_EXPIRES};
+            access_log off;
+            set \$$handle_webp 0;
+            if (\$$http_accept ~* "image/webp") {
+              set \$$handle_webp 1;
+            }
+            proxy_cache my_cache;
+            proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
+            proxy_cache_background_update on;
+            proxy_cache_lock on;
+            proxy_cache_key "\$$scheme\$$host\$$uri\$$handle_webp";
+            server_tokens off;
+            proxy_pass http://imgproxy:8080;
+          }
+        }
+        EOF
+        exec nginx -g 'daemon off;'
+
+volumes:
+  nginx-cache:
--- a/blueprints/imgproxy/imgproxy.png
+++ b/blueprints/imgproxy/imgproxy.png
--- a/blueprints/imgproxy/template.toml
+++ b/blueprints/imgproxy/template.toml
@@ -0,0 +1,56 @@
+[variables]
+main_domain = "${domain}"
+imgproxy_key = "${hash:128}"
+imgproxy_salt = "${hash:128}"
+imgproxy_allowed_sources = "http://${main_domain},https://${main_domain}"
+imgproxy_quality = "80"
+imgproxy_ttl = "30600"
+imgproxy_max_src_file_size = "20971520"
+imgproxy_max_src_resolution = "50"
+imgproxy_log_level = "error"
+imgproxy_max_clients = "10"
+imgproxy_allow_origin = "*"
+imgproxy_enable_webp_detection = "true"
+imgproxy_enforce_webp = "true"
+imgproxy_use_etag = "true"
+nginx_cache_levels = "1:2"
+nginx_cache_keys_zone_size = "32m"
+nginx_cache_max_size = "500m"
+nginx_cache_inactive = "30d"
+nginx_cache_use_temp_path = "off"
+nginx_cache_expires = "30d"
+
+[config]
+[[config.domains]]
+serviceName = "nginx"
+port = 80
+host = "${main_domain}"
+
+[config.env]
+IMGPROXY_KEY = "${imgproxy_key}"
+IMGPROXY_SALT = "${imgproxy_salt}"
+IMGPROXY_ENABLE_WEBP_DETECTION = "${imgproxy_enable_webp_detection}"
+IMGPROXY_ENFORCE_WEBP = "${imgproxy_enforce_webp}"
+IMGPROXY_TTL = "${imgproxy_ttl}"
+IMGPROXY_DEVELOPMENT_ERRORS_MODE = "false"
+IMGPROXY_READ_TIMEOUT = "10"
+IMGPROXY_WRITE_TIMEOUT = "10"
+IMGPROXY_KEEP_ALIVE_TIMEOUT = "10"
+IMGPROXY_DOWNLOAD_TIMEOUT = "5"
+IMGPROXY_CONCURRENCY = ""
+IMGPROXY_MAX_CLIENTS = "${imgproxy_max_clients}"
+IMGPROXY_SO_REUSEPORT = ""
+IMGPROXY_USER_AGENT = ""
+IMGPROXY_USE_ETAG = "${imgproxy_use_etag}"
+IMGPROXY_QUALITY = "${imgproxy_quality}"
+IMGPROXY_ALLOWED_SOURCES = "${imgproxy_allowed_sources}"
+IMGPROXY_ALLOW_ORIGIN = "${imgproxy_allow_origin}"
+IMGPROXY_MAX_SRC_FILE_SIZE = "${imgproxy_max_src_file_size}"
+IMGPROXY_MAX_SRC_RESOLUTION = "${imgproxy_max_src_resolution}"
+IMGPROXY_LOG_LEVEL = "${imgproxy_log_level}"
+NGINX_CACHE_LEVELS = "${nginx_cache_levels}"
+NGINX_CACHE_KEYS_ZONE_SIZE = "${nginx_cache_keys_zone_size}"
+NGINX_CACHE_MAX_SIZE = "${nginx_cache_max_size}"
+NGINX_CACHE_INACTIVE = "${nginx_cache_inactive}"
+NGINX_CACHE_USE_TEMP_PATH = "${nginx_cache_use_temp_path}"
+NGINX_CACHE_EXPIRES = "${nginx_cache_expires}"
--- a/meta.json
+++ b/meta.json
@@ -3099,6 +3099,25 @@
      "group-finances"
    ]
  },
+  {
+    "id": "imgproxy",
+    "name": "imgproxy",
+    "version": "v3.30.1",
+    "description": "imgproxy is a fast and secure image processing server, fronted by nginx with built-in response caching for repeated transformations.",
+    "logo": "imgproxy.png",
+    "links": {
+      "github": "https://github.com/imgproxy/imgproxy",
+      "website": "https://imgproxy.net/",
+      "docs": "https://docs.imgproxy.net/"
+    },
+    "tags": [
+      "images",
+      "media",
+      "proxy",
+      "cdn",
+      "caching"
+    ]
+  },
  {
    "id": "immich",
    "name": "Immich",
@@ -5858,6 +5877,24 @@
      "open-source"
    ]
  },
+  {
+    "id": "strapi",
+    "name": "Strapi",
+    "version": "v5.33.0",
+    "description": "Open-source headless CMS to build powerful APIs with built-in content management.",
+    "logo": "strapi.svg",
+    "links": {
+      "github": "https://github.com/strapi/strapi",
+      "discord": "https://discord.com/invite/strapi",
+      "docs": "https://docs.strapi.io",
+      "website": "https://strapi.io"
+    },
+    "tags": [
+      "headless",
+      "cms",
+      "content-management"
+    ]
+  },
  {
    "id": "streamflow",
    "name": "StreamFlow",
@@ -5877,24 +5914,6 @@
      "media"
    ]
  },
-  {
-    "id": "strapi",
-    "name": "Strapi",
-    "version": "v5.33.0",
-    "description": "Open-source headless CMS to build powerful APIs with built-in content management.",
-    "logo": "strapi.svg",
-    "links": {
-      "github": "https://github.com/strapi/strapi",
-      "discord": "https://discord.com/invite/strapi",
-      "docs": "https://docs.strapi.io",
-      "website": "https://strapi.io"
-    },
-    "tags": [
-      "headless",
-      "cms",
-      "content-management"
-    ]
-  },
  {
    "id": "supabase",
    "name": "SupaBase",