Update NGINX and modules

[felixbuenemann]

• Update to NGINX 1.14.2 – notable changes since 1.13.7:
  • HTTP/2 server push support (we should add an annotation to enable http2_push_preload)
  • Support for the binary PROXY protocol v2 in the proxy_protocol directive (this is required for using PROXY protocol with AWS Network Load Balancer. Classic ELB uses the plaintext v1 protocol.)
  • Fixes CVE-2018-16843 and CVE-2018-16844 DoS attacks via HTTP/2
• Update VTS module to 0.1.18 (lots of crash-fixes)
• Update to last go-dev image based on deis/base image (go 1.7 -> 1.10)
• Don't bake Dockerfile into image
• Remove external binaries, use multi-stage build
  • libmodsecurity 3.0.3 is built in a separate stage
  • remove proprietary tcell nginx ext
  • remove precompiled modsecurity binaries
  • add geoip2 module (because geoip is deprecated)
  • add gunzip core module (useful if proxying precompressed assets)
  • update OWASP mod security core ruleset to latest 3.2/dev
  • remove external configs from s3, copy or modify templates
  • fix some uncaught errors in build script that could lead to corrupted images, because a failure would not set an error exit code
  • log all shell commands via set -x
  • speed up make by using parallel jobs based on cpu cores (nproc)

[Cryptophobia]

Great work on all of the updates, modsecurity cleanup, multi-stage build. Also, thanks for the organized bullet point write up. :1st_place_medal:

I'm going to test this a bit today in AWS and minikube and then should be merged in after that.

[Cryptophobia]

Alright, did some tests on minikube, AWS, and GKE. Didn't test edge cases but router is stable with a simple configuration and ModSecurity still works well. :+1:

Merged!