blob: 6dfbed7e087898acb507ba7da2535ba90c7194d6 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
|
# Maintainer: Stuart Cardall <developer@it-offshore.co.uk>
# Maintainer: Cameron Banta <cbanta@gmail.com>
# Contributor: Jeff Bilyk <jbilyk@gmail.com>
# Contributor: Bartłomiej Piotrowski <nospam@bpiotrowski.pl>
pkgname=nginx-naxsi
_pkgname=nginx
pkgver=1.9.0
_ngx_naxsi_ver=0.54rc2
_ngx_cache_purge_ver=2.3
pkgrel=1
pkgdesc="lightweight HTTP and reverse proxy server with Naxsi WAF support, see also 'nxapi'"
url="http://www.nginx.org | https://github.com/nbs-system/naxsi"
arch="all"
license="custom"
install="$pkgname.pre-install $pkgname.pre-upgrade"
depends="!nginx"
makedepends="pcre-dev openssl-dev zlib-dev paxmark"
_upstreamfair_sha="a18b4099fbd458111983200e098b6f0c8efed4bc"
_httpsysguard_sha="3fcdf27ff91482e1e54eb6fae4e059e814b85d78"
source="http://nginx.org/download/$_pkgname-$pkgver.tar.gz
naxsi-$_ngx_naxsi_ver.tar.gz::https://github.com/nbs-system/naxsi/archive/$_ngx_naxsi_ver.tar.gz
ngx_cache_purge-$_ngx_cache_purge_ver.tar.gz::https://github.com/FRiCKLE/ngx_cache_purge/archive/$_ngx_cache_purge_ver.tar.gz
upstream-fair-${_upstreamfair_sha}.tar.gz::https://github.com/gnosek/nginx-upstream-fair/tarball/${_upstreamfair_sha}
sysguard-${_httpsysguard_sha}.tar.gz::https://github.com/alibaba/nginx-http-sysguard/tarball/${_httpsysguard_sha}
anonymise.patch
ipv6.patch
sysguard.patch
nginx.initd
nginx.logrotate
"
_builddir="$srcdir"/$_pkgname-$pkgver
prepare() {
local i
cd "$_builddir"
for i in $source; do
case $i in
*.patch) msg $i; patch -p1 -i "$srcdir"/$i || return 1;;
esac
done
}
build() {
cd "$_builddir"
./configure \
--add-module="$srcdir/naxsi-$_ngx_naxsi_ver/naxsi_src" \
--add-module="$srcdir/alibaba-nginx-http-sysguard-3fcdf27" \
--prefix=/usr \
--conf-path=/etc/$_pkgname/$_pkgname.conf \
--pid-path=/var/run/$_pkgname.pid \
--lock-path=/var/run/$_pkgname.lock \
--error-log-path=/var/log/$_pkgname/error.log \
--http-log-path=/var/log/$_pkgname/access.log \
--http-client-body-temp-path=/tmp/$_pkgname/client-body \
--http-proxy-temp-path=/tmp/$_pkgname/proxy \
--http-fastcgi-temp-path=/tmp/$_pkgname/fastcgi \
--user=nginx \
--group=nginx \
--with-ipv6 \
--with-pcre-jit \
--with-http_ssl_module \
--with-http_gzip_static_module \
--with-http_spdy_module \
--without-mail_pop3_module \
--without-mail_smtp_module \
--without-mail_imap_module \
--without-http_uwsgi_module \
--without-http_scgi_module \
--with-http_realip_module \
--with-http_stub_status_module \
--with-http_auth_request_module \
--add-module="$srcdir/ngx_cache_purge-$_ngx_cache_purge_ver" \
--add-module="$srcdir/gnosek-nginx-upstream-fair-a18b409" \
|| return 1
make || return 1
}
package() {
cd "$_builddir"
make DESTDIR="$pkgdir" install
local paxflags="-m"
[ "$CARCH" = "x86" ] && paxflags="-msp"
paxmark "$paxflags" "$pkgdir"/usr/sbin/nginx || return 1
install -m755 -D "$srcdir"/$_pkgname.initd "$pkgdir"/etc/init.d/$_pkgname
install -m644 -D "$srcdir"/$_pkgname.logrotate "$pkgdir"/etc/logrotate.d/$_pkgname
install -m644 -D LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
install -m644 -D "$srcdir"/naxsi-$_ngx_naxsi_ver/naxsi_config/naxsi_core.rules "$pkgdir"/etc/nginx/naxsi_core.rules
}
md5sums="487c26cf0470d8869c41a73621847268 nginx-1.9.0.tar.gz
6b091c34a0aa76184effaaeb26af7c09 naxsi-0.54rc2.tar.gz
dc4c0688ed03ca7f5563097c2a8a76ca ngx_cache_purge-2.3.tar.gz
ac5e7f485476af70e0ee1c52016cddaf upstream-fair-a18b4099fbd458111983200e098b6f0c8efed4bc.tar.gz
bbbcf5d949f5e335a2bd49c1f0e0c89d sysguard-3fcdf27ff91482e1e54eb6fae4e059e814b85d78.tar.gz
a07569b8a023f1b89dcd11e0beda4df6 anonymise.patch
801a87f7f9d27f8ad85b41a78b4c4461 ipv6.patch
50357b75049d878c0bcce10d0c60f9ed sysguard.patch
609ea97ab6c3c30f9e8329968aadc4f3 nginx.initd
8823274a834332d3db4f62bf7dd1fb7d nginx.logrotate"
sha256sums="e12aa1d5b701edde880ebcc7be47ca171c3fbeed8fa7c8c62054a6f19d27f248 nginx-1.9.0.tar.gz
2f7f2c0fb4dacf489febb719e7834a2b16c9b471e16ef1125e7f87174defeecc naxsi-0.54rc2.tar.gz
cb7d5f22919c613f1f03341a1aeb960965269302e9eb23425ccaabd2f5dcbbec ngx_cache_purge-2.3.tar.gz
0306f503f6052abbe5da9a6936b595bedcd5ef1b7a89a694ae8e2212cbb794a5 upstream-fair-a18b4099fbd458111983200e098b6f0c8efed4bc.tar.gz
39c9bd87d4660017a16909a9804dddd259d0bf0db803f725c2b9bb95d8e52c70 sysguard-3fcdf27ff91482e1e54eb6fae4e059e814b85d78.tar.gz
1923ebdb4a64a22f8903c3da619677bd3aaf769c99bee1aa4262edac58f05ba3 anonymise.patch
a24ef5843ae0afa538b00c37eb7da7870f9d7f146f52a9668678f7296cf71d9b ipv6.patch
18090329435c32d91621a5943acc5b8bbe89aaa3c2fa334c3a4cdeb00efb6226 sysguard.patch
8cbef405295eac299dfc3b9b119c02bda354a9b335923bed6ff6992c1fd8f493 nginx.initd
cea0c6f8de55a4c3a3eccc57910de1c3116634082c8e5b660630fb927a29f38d nginx.logrotate"
sha512sums="a7750b8b9a0c89b2de9467b14b4af6fb61e5064995a6ef7bb04cd10424ce4fd2fda31eee0f24551c222ceef491be4621e88d30708f3b2cc088767c8e8bb70589 nginx-1.9.0.tar.gz
cd79ed8aa51482edaa68bd6f34cd64848bb990a31452fe4da14b17bf94a178102892fb51868cdc39d7712b523a0d3a85135af3f9d02f7eb566a0b87fc0cf6414 naxsi-0.54rc2.tar.gz
81929ca57ce5c2e1af6ec43882a54ff1da8dc77786bfb7505ff94fbcf970ae8870b419dc5c0bc7b80794d75a359e0100f360c1cf458a300f802b1d8bd7053811 ngx_cache_purge-2.3.tar.gz
843f2037fca792a215daf3ab33ca5bb1ffc159a0bfb3f54f1d7c5e992ec394bc5d41a01f01b4a9ede02bab795b1d1f8f06dc88ae1a1d60480fc10a5cfc51a6a1 upstream-fair-a18b4099fbd458111983200e098b6f0c8efed4bc.tar.gz
aa7f912c0507f8f59df0410f0295896232772bfc19cbcb602da33705a959c3e334608bee1c77041cc27eb781c3b0264c33eeafe9761b64e5c6323a9f54876127 sysguard-3fcdf27ff91482e1e54eb6fae4e059e814b85d78.tar.gz
5899097b6b6ed04deb7ae474fb65205d9c50843f30929c1370c0c1d70df3f02fe51b8ea90d3d2c3b4c53aeb3895717729e0c9773b880ca529e89a5b07fc26a5b anonymise.patch
68d64a84568ec2df0366925ab282a05ebe21a85044b6c7844a47573cfd8cc8ed119cc772358bc3fff36e2d4fdf583a730592825f5f98632993ca86d1f8438d5f ipv6.patch
2dca2ac74fb92e330fde7b6b6120b2fd2565c377a629c9536cf77beebe41aa4b092d4229d5b487b0fb02be4f2cc5b897c429c87bbbbc7b0d31e1cbb94231ddce sysguard.patch
6e9a37176c0ca5a463a2745401bc5a6f9c002a236244b615a2803ec04404cc768678a1fa27ee047f81f4ccf002f7bea4b803522049f4ef839c61bb83577b9d65 nginx.initd
01b77cff16f6e8bfd7fa1d4d20f625bbcddd08f0509173452d060c342c93dc315a7b0560f4734323a5d29ea294de0491f2e3f32e5337574e1a28ebc005eceea8 nginx.logrotate"
|
