support geoip2

Author: terryzwt

Dockerfile

@@ -1,16 +1,40 @@
+FROM nginxproxy/nginx-proxy AS builder
+
+ENV GEOIP2_VERSION=3.4
+
+# 安装编译依赖并编译 GeoIP2 模块
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    libpcre3-dev \
+    zlib1g-dev \
+    libgeoip-dev \
+    libmaxminddb-dev \
+    wget \
+    git \
+    && cd /opt \
+    && git clone --depth 1 -b $GEOIP2_VERSION --single-branch https://github.com/leev/ngx_http_geoip2_module.git \
+    && wget -O - http://nginx.org/download/nginx-$NGINX_VERSION.tar.gz | tar xzf - \
+    && cd nginx-$NGINX_VERSION \
+    && ./configure --with-compat --add-dynamic-module=/opt/ngx_http_geoip2_module \
+    && make modules
+
+# 最终镜像
 FROM nginxproxy/nginx-proxy
-RUN { \
-      echo 'server_tokens off;'; \
-      echo 'client_max_body_size 1024m;'; \
-      echo 'proxy_buffer_size 256k;'; \
-      echo 'proxy_buffers 4 256k;'; \
-      echo 'proxy_busy_buffers_size 256k;'; \
-      echo 'proxy_hide_header X-Generator;'; \
-      echo 'client_header_buffer_size 64k;'; \
-      echo 'large_client_header_buffers 4 64k;'; \
-      echo 'proxy_connect_timeout 300;'; \
-      echo 'proxy_send_timeout  300;'; \
-      echo 'proxy_read_timeout  300;'; \
-      echo 'send_timeout 300;'; \
-    } > /etc/nginx/conf.d/my_proxy.conf
+
+# 复制编译好的模块
+COPY --from=builder /opt/nginx-*/objs/ngx_http_geoip2_module.so /usr/lib/nginx/modules/
+
+# 安装运行时依赖并下载 GeoIP 数据库
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends libmaxminddb0 wget \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/* \
+    && chmod 644 /usr/lib/nginx/modules/ngx_http_geoip2_module.so \
+    && sed -i '1iload_module /usr/lib/nginx/modules/ngx_http_geoip2_module.so;' /etc/nginx/nginx.conf \
+    && mkdir -p /usr/share/geoip \
+    && wget -O /usr/share/geoip/GeoLite2-Country.mmdb https://github.com/P3TERX/GeoLite.mmdb/raw/download/GeoLite2-Country.mmdb \
+    && wget -O /usr/share/geoip/GeoLite2-City.mmdb https://github.com/P3TERX/GeoLite.mmdb/raw/download/GeoLite2-City.mmdb
+
+COPY rootfs/etc/nginx/conf.d/my_proxy.conf /etc/nginx/conf.d/my_proxy.conf
+COPY rootfs/etc/nginx/conf.d/geoip2.conf /etc/nginx/conf.d/geoip2.conf
 ADD https://raw.githubusercontent.com/h5bp/server-configs-nginx/main/h5bp/web_performance/compression.conf /etc/nginx/conf.d/compression-gzip.conf

rootfs/etc/nginx/conf.d/geoip2.conf

@@ -0,0 +1,28 @@
+set_real_ip_from 0.0.0.0/0;
+real_ip_header X-Forwarded-For;
+real_ip_recursive on;
+
+map $http_x_forwarded_for $realip {
+    ~^(\d+\.\d+\.\d+\.\d+) $1;
+    default $remote_addr;
+}
+
+geoip2 /usr/share/geoip/GeoLite2-Country.mmdb {
+    auto_reload 24h;
+    $geoip2_metadata_country_build metadata build_epoch;
+    $geoip2_data_country_code source=$realip country iso_code;
+    $geoip2_data_country_name source=$realip country names en;
+}
+geoip2 /usr/share/geoip/GeoLite2-City.mmdb {
+    auto_reload 60m;
+    $geoip2_metadata_city_build metadata build_epoch;
+    $geoip2_data_city source=$realip city names en;
+    $geoip2_data_latitude source=$realip location latitude;
+    $geoip2_data_longitude source=$realip location longitude;
+    $geoip2_data_time_zone source=$realip location time_zone;
+    $geoip2_data_region source=$realip subdivisions iso_code;
+    $geoip2_data_region_name source=$realip subdivisions names en;
+    $geoip2_data_country_code source=$realip country iso_code;
+    $geoip2_data_country_name source=$realip country names en;
+    $geoip2_data_continent_code source=$realip continent code;
+}

rootfs/etc/nginx/conf.d/my_proxy.conf

@@ -0,0 +1,12 @@
+server_tokens off;
+client_max_body_size 1024m;
+proxy_buffer_size 256k;
+proxy_buffers 4 256k;
+proxy_busy_buffers_size 256k;
+proxy_hide_header X-Generator;
+client_header_buffer_size 64k;
+large_client_header_buffers 4 64k;
+proxy_connect_timeout 300;
+proxy_send_timeout 300;
+proxy_read_timeout 300;
+send_timeout 300;