diff --git a/docs/images/docker-swag.md b/docs/images/docker-swag.md index bd37d5c5cb..90db3eef4f 100755 --- a/docs/images/docker-swag.md +++ b/docs/images/docker-swag.md @@ -124,6 +124,16 @@ This will *ask* Google et al not to index and list your site. Be careful with th * Proxy sample files WILL be updated, however your renamed (enabled) proxy files will not. * You can check the new sample and adjust your active config as needed. +### QUIC support + +This image supports QUIC (also known as HTTP/3) but it must be explicitly enabled in each proxy conf, and the default conf, because if the listener is enabled and you don't expose 443/UDP, it can break connections with some browsers. + +To enable QUIC, expose 443/UDP to your clients, then uncomment both QUIC listeners in all of your active proxy confs, as well as the default conf, and restart the container. + +You should also uncomment the `Alt-Svc` header in your `ssl.conf` so that browsers are aware that you offer QUIC connectivity. + +It is [recommended](https://quic-go.net/docs/quic/optimizations/#udp-buffer-sizes) to increase the UDP send/recieve buffer **on the host** by setting the `net.core.rmem_max` and `net.core.wmem_max` sysctls. Suggested values are 4-16Mb (4194304-16777216 bytes). For persistence between reboots use `/etc/sysctl.d/`. + ### Migration from the old `linuxserver/letsencrypt` image Please follow the instructions [on this blog post](https://www.linuxserver.io/blog/2020-08-21-introducing-swag#migrate). @@ -177,6 +187,7 @@ services: ports: - 443:443 - 80:80 #optional + - 443/udp:443/udp #optional restart: unless-stopped ``` @@ -204,6 +215,7 @@ docker run -d \ -e SWAG_AUTORELOAD_WATCHLIST= `#optional` \ -p 443:443 \ -p 80:80 `#optional` \ + -p 443/udp:443/udp `#optional` \ -v /path/to/swag/config:/config \ --restart unless-stopped \ lscr.io/linuxserver/swag:latest @@ -219,6 +231,7 @@ Containers are configured using parameters passed at runtime (such as those abov | :----: | --- | | `443:443` | HTTPS port | | `80:80` | HTTP port (required for HTTP validation and HTTP -> HTTPS redirect) | +| `443/udp:443/udp` | QUIC (HTTP/3) port. Must be enabled in the default and proxy confs. | ### Environment Variables (`-e`) @@ -485,13 +498,14 @@ To help with development, we generate this dependency graph. svc-swag-auto-reload -> legacy-services } Base Images: { - "baseimage-alpine-nginx:3.21" <- "baseimage-alpine:3.21" + "baseimage-alpine-nginx:3.22" <- "baseimage-alpine:3.22" } "swag:latest" <- Base Images ``` ## Versions +* **18.07.25:** - Rebase to Alpine 3.22 with PHP 8.4. Add QUIC support. Drop PHP bindings for mcrypt as it is no longer maintained. * **05.05.25:** - Disable Certbot's built in log rotation. * **19.01.25:** - Add [Auto Reload](https://github.com/linuxserver/docker-mods/tree/swag-auto-reload) functionality to SWAG. * **17.12.24:** - Rebase to Alpine 3.21.