nginquic : closing note

README.md

@@ -1,4 +1,5 @@
 ## Status : Deprecated, QUIC branch is closed and merged to main Nginx repository. also, the script is no longer working. Because of the changes.
+Btw, Future maintainance of the script will continue here: [https://github.com/minoplhy/scriptbox/tree/main/nginx_build_script](https://github.com/minoplhy/scriptbox/tree/main/nginx_build_script). Though the main purpose is for personal usage, this might not suit you well.
 
 # Note to Self :
 This Script is using to build nginx with quic and some modules i'm currently using .
@@ -10,7 +11,7 @@ OS : Debian
 
 ```shell
 export Nginx_Install=yes  # This variable is required if you want Nginx to be installed scriptibly (on Debian-based systems).
-curl https://raw.githubusercontent.com/minoplhy/nginquic/main/build.sh > ~/nginquic.sh
+curl https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/build.sh > ~/nginquic.sh
 bash ~/nginquic.sh
 ```
 

build.sh

@@ -2,7 +2,7 @@
 
 cd ~/
 rm -rf nginquic
-curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/main/packages.sh | bash
+curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/packages.sh | bash
 mkdir nginquic && cd nginquic
 
 # Install Golang
@@ -17,16 +17,28 @@ git clone --depth=1 https://github.com/google/boringssl
 cd boringssl
 mkdir build && cd build && cmake .. && make
 cd .. && cd ..
+
+# ModSecurity Part
+git clone --depth=1 https://github.com/SpiderLabs/ModSecurity
+cd ModSecurity/
+git submodule init
+git submodule update
+./build.sh
+./configure
+make
+sudo make install
+cd ..
+
 cd nginx-quic
-mkdir mosc && cd mosc && curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/main/modules.sh | bash && cd ..
+mkdir mosc && cd mosc && curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/modules.sh | bash && cd ..
-curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/main/configure.sh | bash && make
+curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/configure.sh | bash && make
 
 if [[ $Nginx_Install == "yes" ]]; then
     mkdir /lib/nginx/ && mkdir /lib/nginx/modules
     cd objs && cp *.so /lib/nginx/modules
     rm /usr/sbin/nginx
     cp nginx /usr/sbin/nginx
-    curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/main/modules.conf > modules.conf
+    curl -sSL https://raw.githubusercontent.com/minoplhy/nginquic/ModSecurity_incl/modules.conf > modules.conf
     cp modules.conf /etc/nginx/modules-enabled
 else
     echo "Nginx_Install variable isn't set/vaild. Your Nginx assets location is : ~/nginquic/nginx-quic/objs"

configure.sh

@@ -47,6 +47,7 @@
 --add-dynamic-module=mosc/ngx_cache_purge \
 --add-dynamic-module=mosc/nginx-dav-ext-module \
 --add-dynamic-module=mosc/echo-nginx-module \
+--add-dynamic-module=mosc/ModSecurity-nginx \
 --with-http_v3_module \
 --with-stream_quic_module \
 --with-http_geoip_module \

modules.conf

@@ -3,3 +3,4 @@ load_module /lib/nginx/modules/ngx_http_cache_purge_module.so;
 load_module /lib/nginx/modules/ngx_http_dav_ext_module.so;
 load_module /lib/nginx/modules/ngx_http_echo_module.so;
 load_module /lib/nginx/modules/ngx_http_headers_more_filter_module.so;
+load_module /lib/nginx/modules/ngx_http_modsecurity_module.so;

modules.sh

@@ -2,4 +2,5 @@ git clone https://github.com/openresty/headers-more-nginx-module
 git clone https://github.com/sto/ngx_http_auth_pam_module
 git clone https://github.com/arut/nginx-dav-ext-module/
 git clone https://github.com/openresty/echo-nginx-module
-git clone https://github.com/nginx-modules/ngx_cache_purge
+git clone https://github.com/nginx-modules/ngx_cache_purge
+git clone https://github.com/SpiderLabs/ModSecurity-nginx

packages.sh

@@ -1 +1,2 @@
 sudo apt-get install mercurial libunwind-dev libpcre3 libpcre3-dev zlib1g-dev cmake make libxslt1-dev libgd-dev libssl-dev libperl-dev libpam0g-dev libgeoip-dev git g++ -y
+sudo apt-get install apt-utils autoconf automake build-essential libcurl4-openssl-dev liblmdb-dev libpcre++-dev libtool libxml2-dev libyajl-dev pkgconf wget -y