From e9da522f68ab4553ad16c077a59a38171664fdd3 Mon Sep 17 00:00:00 2001 From: Thomas Heil Date: Mon, 23 Jun 2014 16:37:24 +0200 Subject: nginx: import from packages, add myself as the maintainer This adds the nginx package from the old svn package fee. I adopt the licensing information and will maintain the package in the future. This request also updates nginx to the last stable version 1.4.7. It further adds support for - naxsi (the ngix web application firewall) - syslog module - http upstream check module - support for the haproxy Proxy Protocol (this way nginx can see the real ip address behind haproxy) Building was tested with target x86_64, ar71xx and avr32. Signed-off-by: Thomas Heil --- net/nginx/files/nginx.init | 24 ++++++++++++ net/nginx/files/nginx.proxyprotocol.example | 40 +++++++++++++++++++ net/nginx/files/nginx.syslog.example | 59 +++++++++++++++++++++++++++++ 3 files changed, 123 insertions(+) create mode 100644 net/nginx/files/nginx.init create mode 100644 net/nginx/files/nginx.proxyprotocol.example create mode 100644 net/nginx/files/nginx.syslog.example (limited to 'net/nginx/files') diff --git a/net/nginx/files/nginx.init b/net/nginx/files/nginx.init new file mode 100644 index 000000000..adf36b442 --- /dev/null +++ b/net/nginx/files/nginx.init @@ -0,0 +1,24 @@ +#!/bin/sh /etc/rc.common +# Copyright (C) 2009-2012 OpenWrt.org + +START=50 +NGINX_BIN=/usr/sbin/nginx + +start() { + mkdir -p /var/log/nginx + mkdir -p /var/lib/nginx + $NGINX_BIN +} + +stop() { + $NGINX_BIN -s stop +} + +reload() { + $NGINX_BIN -s reload +} + +shutdown() { + $NGINX_BIN -s quit +} + diff --git a/net/nginx/files/nginx.proxyprotocol.example b/net/nginx/files/nginx.proxyprotocol.example new file mode 100644 index 000000000..ab4bad625 --- /dev/null +++ b/net/nginx/files/nginx.proxyprotocol.example @@ -0,0 +1,40 @@ +worker_processes 1; +pid /tmp/nginx.pid; +daemon off; +master_process off; +error_log stderr debug_core; + +events { + debug_connection ; + debug_connection ; + worker_connections 1024; +} + +http { + default_type application/octet-stream; + client_body_temp_path /tmp/body 1; + + access_log /tmp/nginx_access.log; + + server { +# listen 8082 ssl; +# proxy protocol configuration for nginx 1.4.x: + listen 8082 accept_proxy_protocol=on; +# same with spdy enabled: +# listen 8082 spdy ssl accept_proxy_protocol=on; + listen [::]:8082 ipv6only=on; + ssl_certificate /your/certificate; + ssl_certificate_key /your/key; + server_name localhost; +# proxy protocol configuration for nginx 1.2.x: +# accept_proxy_protocol on; + + location / { + proxy_pass http://127.0.0.1:8084; + proxy_set_header X-Real-IP $remote_addr; + proxy_connect_timeout 10s; + proxy_read_timeout 10s; + send_proxy_protocol on; + } + } +} diff --git a/net/nginx/files/nginx.syslog.example b/net/nginx/files/nginx.syslog.example new file mode 100644 index 000000000..05943448d --- /dev/null +++ b/net/nginx/files/nginx.syslog.example @@ -0,0 +1,59 @@ +worker_processes 1; + +syslog local6 nginx; + +events { + worker_connections 1024; +} + +http { + include mime.types; + default_type application/octet-stream; + + log_format main '$remote_addr - $remote_user [$time_local] $request ' + '"$status" $body_bytes_sent "$http_referer" ' + '"$http_user_agent" "$http_x_forwarded_for"'; + + server { + listen 80; + server_name localhost; + + #send the log to syslog and file. + access_log syslog:notice|logs/host1.access.log main; + + # pre 1.5.x + error_log syslog:notice|logs/host1.error.log; + + location / { + root html; + index index.html index.htm; + } + } + + server { + listen 80; + server_name www.example.com; + + access_log syslog:warn|logs/host2.access.log main; + error_log syslog:warn|logs/host2.error.log; + + location / { + root html; + index index.html index.htm; + } + } + + server { + listen 80; + server_name www.test.com; + + #send the log just to syslog. + access_log syslog:error main; + error_log syslog:error; + + location / { + root html; + index index.html index.htm; + } + } +} -- cgit v1.2.3