minoplhy/scriptbox
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

nginx_build_script: enhance: not longer build lua/modsecurity by default

Browse Source
This commit is contained in:
minoplhy 2024-10-10 21:55:06 +07:00
parent 6510607877
commit fa049f97aa
Signed by: minoplhy
GPG Key ID: 41D406044E2434BF
2 changed files with 22 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
nginx_build_script/README.md
View File

@ -17,8 +17,10 @@ curl https://raw.githubusercontent.com/minoplhy/scriptbox/main/nginx_build_scrip
```bash ```bash
while [ ${#} -gt 0 ]; do while [ ${#} -gt 0 ]; do
case "$1" in case "$1" in
--no-modsecurity | -nm ) DISABLE_MODSECURITY=true;; # Not include ModSecurity in building --modsecurity ) WITH_MODSECURITY=true ;; # Include ModSecurity in building
--no-lua | -nl ) DISABLE_LUA=true ;; # Not include Lua in building --lua ) WITH_LUA=true ;; # Include Lua in building
--no-modsecurity | -nm ) WITH_MODSECURITY=false ;; # LEGACY: Not include ModSecurity in building
--no-lua | -nl ) WITH_LUA=false ;; # LEGACY: Not include Lua in building
--install | -i ) INSTALL=true ;; # Install Nginx --install | -i ) INSTALL=true ;; # Install Nginx
--ssl=* ) --ssl=* )
SSL_LIB="${1#*=}" SSL_LIB="${1#*=}"
@ -69,6 +71,7 @@ while [ ${#} -gt 0 ]; do
esac esac
shift shift
done done
``` ```
#### Note : #### Note :
@ -194,5 +197,5 @@ upgrade() {
eend $? "Upgrade failed" eend $? "Upgrade failed"
} }
modified from https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/nginx/nginx.initd # modified from https://gitlab.alpinelinux.org/alpine/aports/-/blob/master/main/nginx/nginx.initd
``` ```

23
nginx_build_script/build.sh
View File

@ -2,8 +2,10 @@
while [ ${#} -gt 0 ]; do while [ ${#} -gt 0 ]; do
case "$1" in case "$1" in
--no-modsecurity | -nm ) DISABLE_MODSECURITY=true;; # Not include ModSecurity in building --modsecurity ) WITH_MODSECURITY=true ;; # Include ModSecurity in building
--no-lua | -nl ) DISABLE_LUA=true ;; # Not include Lua in building --lua ) WITH_LUA=true ;; # Include Lua in building
--no-modsecurity | -nm ) WITH_MODSECURITY=false ;; # LEGACY: Not include ModSecurity in building
--no-lua | -nl ) WITH_LUA=false ;; # LEGACY: Not include Lua in building
--install | -i ) INSTALL=true ;; # Install Nginx --install | -i ) INSTALL=true ;; # Install Nginx
--ssl=* ) --ssl=* )
SSL_LIB="${1#*=}" SSL_LIB="${1#*=}"
@ -59,6 +61,9 @@ done
SSL_LIB=${SSL_LIB:-"boringssl"} SSL_LIB=${SSL_LIB:-"boringssl"}
BUILD_TYPE=${BUILD_TYPE:-"nginx"} BUILD_TYPE=${BUILD_TYPE:-"nginx"}
WITH_MODSECURITY=${WITH_MODSECURITY:-false}
WITH_LUA=${WITH_LUA:-false}
################################# #################################
## ## ## ##
## Dependencies Setup ## ## Dependencies Setup ##
@ -225,7 +230,7 @@ case $SSL_LIB in
esac esac
# ModSecurity # ModSecurity
if [ ! "${DISABLE_MODSECURITY}" == true ]; then if [ "${WITH_MODSECURITY}" == true ]; then
git clone --depth=1 https://github.com/SpiderLabs/ModSecurity $HOMEDIRECTORY/ModSecurity git clone --depth=1 https://github.com/SpiderLabs/ModSecurity $HOMEDIRECTORY/ModSecurity
cd $HOMEDIRECTORY/ModSecurity cd $HOMEDIRECTORY/ModSecurity
git submodule init git submodule init
@ -246,11 +251,11 @@ mkdir $HOMEDIRECTORY/nginx/mosc
git clone https://github.com/openresty/headers-more-nginx-module $HOMEDIRECTORY/nginx/mosc/headers-more-nginx-module git clone https://github.com/openresty/headers-more-nginx-module $HOMEDIRECTORY/nginx/mosc/headers-more-nginx-module
git clone https://github.com/openresty/echo-nginx-module $HOMEDIRECTORY/nginx/mosc/echo-nginx-module git clone https://github.com/openresty/echo-nginx-module $HOMEDIRECTORY/nginx/mosc/echo-nginx-module
if [ ! "${DISABLE_MODSECURITY}" == true ]; then if [ "${WITH_MODSECURITY}" == true ]; then
git clone https://github.com/SpiderLabs/ModSecurity-nginx $HOMEDIRECTORY/nginx/mosc/ModSecurity-nginx git clone https://github.com/SpiderLabs/ModSecurity-nginx $HOMEDIRECTORY/nginx/mosc/ModSecurity-nginx
fi fi
if [ ! "${DISABLE_LUA}" == true ]; then if [ "${WITH_LUA}" == true ]; then
git clone https://github.com/vision5/ngx_devel_kit $HOMEDIRECTORY/nginx/mosc/ngx_devel_kit git clone https://github.com/vision5/ngx_devel_kit $HOMEDIRECTORY/nginx/mosc/ngx_devel_kit
git clone https://github.com/openresty/lua-nginx-module $HOMEDIRECTORY/nginx/mosc/lua-nginx-module git clone https://github.com/openresty/lua-nginx-module $HOMEDIRECTORY/nginx/mosc/lua-nginx-module
fi fi
@ -266,7 +271,7 @@ cmake --build . --config Release --target brotlienc
# #
# lua resty core,lrucache,luajit2 # lua resty core,lrucache,luajit2
if [ ! "${DISABLE_LUA}" == true ]; then if [ "${WITH_LUA}" == true ]; then
mkdir -p $HOMEDIRECTORY/nginx-lua && cd $HOMEDIRECTORY/nginx-lua mkdir -p $HOMEDIRECTORY/nginx-lua && cd $HOMEDIRECTORY/nginx-lua
sudo mkdir -p /opt/nginx-lua-module/ sudo mkdir -p /opt/nginx-lua-module/
git clone https://github.com/openresty/lua-resty-core $HOMEDIRECTORY/nginx-lua/lua-resty-core git clone https://github.com/openresty/lua-resty-core $HOMEDIRECTORY/nginx-lua/lua-resty-core
@ -365,7 +370,7 @@ case $SSL_LIB in
;; ;;
esac esac
if [ ! "${DISABLE_MODSECURITY}" == true ]; then if [ "${WITH_MODSECURITY}" == true ]; then
NGINX_CONFIG_PARAMS+=( NGINX_CONFIG_PARAMS+=(
--add-dynamic-module=mosc/ModSecurity-nginx --add-dynamic-module=mosc/ModSecurity-nginx
) )
@ -373,7 +378,7 @@ fi
# SomeHow, Nginx is broken when compiling as dynamic module with BoringSSL. # SomeHow, Nginx is broken when compiling as dynamic module with BoringSSL.
# Compiling as module seems to fix this. # Compiling as module seems to fix this.
if [ ! "${DISABLE_LUA}" == true ]; then if [ "${WITH_LUA}" == true ]; then
NGINX_CONFIG_PARAMS+=( NGINX_CONFIG_PARAMS+=(
--add-module=mosc/ngx_devel_kit --add-module=mosc/ngx_devel_kit
--add-module=mosc/lua-nginx-module --add-module=mosc/lua-nginx-module
@ -419,7 +424,7 @@ load_module /lib/nginx/modules/ngx_http_brotli_filter_module.so;
load_module /lib/nginx/modules/ngx_http_brotli_static_module.so; load_module /lib/nginx/modules/ngx_http_brotli_static_module.so;
EOL EOL
if [ ! "${DISABLE_MODSECURITY}" == true ]; then if [ "${WITH_MODSECURITY}" == true ]; then
cat >>modules.conf <<EOL cat >>modules.conf <<EOL
load_module /lib/nginx/modules/ngx_http_modsecurity_module.so; load_module /lib/nginx/modules/ngx_http_modsecurity_module.so;
EOL EOL