NGINX is a high performance edge web server with the lowest memory footprint
and the key features to build modern and efficient web infrastructure.
NGINX functionality includes HTTP server, HTTP and mail reverse proxy, caching,
load balancing, compression, request throttling, connection multiplexing and
reuse, SSL offload and HTTP media streaming.
See also: https://nginx.org/
www/nginx: Fix nginx with LUA after lua-resty-core update
In f08bfacc8fd6 lua-resty-core was updated this requires an updated
version of openresty-lua-nginx-module.
To prevent further people from bricking their nginx update the
openresty-lua-nginx-module 3rd party module to 0.10.26.
Otherwise people will find an nginx that does not start anymore with
the following error message:
nginx: [alert] failed to load the 'resty.core' module
(https://github.com/openresty/lua-resty-core); ensure you are using an
OpenResty release from https://openresty.org/en/download.html (reason:
/usr/local/share/lua/5.1/resty/core/base.lua:24: ngx_http_lua_module
0.10.26 required) in /usr/local/etc/nginx/nginx.conf:1044
PR: 277145
Approved by: portmgr (blanket, just fix it)
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree
- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
Also move conditional flags for non sparc64/arm ARCH to fixed flags.
Reviewed by: brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
www/nginx: Update 3rd party module
switch the 3rd party module zip to evanmiller. This project is more
active than vince2678
PR: 270970
Sponsored by: Netzkommune GmbH
www/nginx: Moved Naxsi module
Moved the 3rd Madule Naxsi to a activ repository
PR: 271963
Redorted by: David Armstrong <freebsd-bugzilla@b-interactive.com.au>
Sponsored by: Netzkommune GmbH
www/nginx: Update 3rd-party module
Resurrect GSSAPI radio button for http_auth_krb5 module, last one
builds just fine with both implementations now.
Obtained from: nginx-devel
Sponsored by: Netzkommune GmbH
www/nginx: Update to 1.24.0
Update NGINX to 1.24.0
Overview of the changes from nginx-devel. Osa has made many good changes in the
last devel phases. These have been adopted into the nginx port (httpv3 ....).
Also all modules were updated to the latest version
Sponsored by: Netzkommune GmbH
www/nginx: fix dependences for some modules
HTTP_DAV_EXT module requires libraries, so let's define them with a more
canonical way.
While I'm here use the same way to define dependences for the HTTP_XSLT module
as well.
PR: 261134
Sponsored by: Netzkommune GmbH
www/nginx: unbreak build after 18c6e1827669 (+)
Changes in framework need adjustment for declared options.
*_USE=ruby now became as *_USES=ruby
Approved by: portmgr blanket
www/nginx: Fix nginx after lua-resty-core update
Update 3rd party module ngx_http_lua_module to 0.10.22 otherwise nginx
fails to start with the following error message:
nginx: [alert] failed to load the 'resty.core' module
(https://github.com/openresty/lua-resty-core); ensure you are using an
OpenResty release from https://openresty.org/en/download.html (reason:
/usr/local/share/lua/5.1/resty/core/base.lua:23: ngx_http_lua_module
0.10.22 required) in /usr/local/etc/nginx/nginx.conf:76
This has been broken for almost two weeks, use the
"Trivial and tested build and runtime fixes" blanket from 22.8.1 of the
committers guide to prevent more people from breaking their production
setups. nginx-devel already has version 0.10.22 of the module.
PR: 267418
www/nginx: Update to 1.22.1
Changelog:
*) Security: processing of a specially crafted mp4 file by the
ngx_http_mp4_module might cause a worker process crash, worker
process memory disclosure, or might have potential other impact
(CVE-2022-41741, CVE-2022-41742).
Sponsored by: Netzkommune GmbH
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
www/nginx: Update 3rd party Module NJS
Update the NJS Modile to 0.7.6:
Notable new features:
- improved r.args:
Now, duplicate keys are returned as an array, keys are
case-sensitive, both keys and values are percent-decoded.
For example, the query string
'a=1&b=%32&A=3&b=4&B=two%20words'
is converted to r.args as:
{a: "1", b: ["2", "4"], A: "3", B: "two words"}
(Only the first 15 lines of the commit message are shown above )
www: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
*
* <hvo.pm@xs4all.nl>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Dalton <aaron@daltons.ca>
* Aaron LI <aly@aaronly.me>
* Aaron Zauner <az_mail@gmx.at>
* Abel Chow <achow@transoft.net>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Adrian Steinmann <ast@marabu.ch>
* Akinori MUSHA aka knu <knu@idaemons.org>
(Only the first 15 lines of the commit message are shown above )
www/nginx: revert to 1.22.0
reverted to 1.22.0 by my mistake, since 1.23.x is a mainline version
More Coffee for: joneum
Sponsored by: Netzkommune GmbH
www/nginx: Update to 1.23.0
Changes with nginx 1.23.0 21 Jun 2022
*) Change in internal API: now header lines are represented as linked
lists.
*) Change: now nginx combines arbitrary header lines with identical
names when sending to FastCGI, SCGI, and uwsgi backends, in the
$r->header_in() method of the ngx_http_perl_module, and during lookup
of the "$http_...", "$sent_http_...", "$sent_trailer_...",
"$upstream_http_...", and "$upstream_trailer_..." variables.
*) Bugfix: if there were multiple "Vary" header lines in the backend
response, nginx only used the last of them when caching.
(Only the first 15 lines of the commit message are shown above )
www/nginx: Update 3rd Party Modul NJS:
Changes with njs 0.7.5 21 Jun 2022
nginx modules:
*) Change: adapting to changes in nginx header structures.
*) Bugfix: fixed r.headersOut special getters when value
is absent.
*) Change: returning undefined value instead of an empty string
for Content-Type when the header is absent.
Core:
(Only the first 15 lines of the commit message are shown above )
www/nginx*: remove KRB5
- The Kerberos MIT implementation is the only one is supported by the
third-party spnego module, so remove needless staff.
- Update the 3rd party module PUSH to 1.2.15
- Set PCRE1 als default Option
Sponsored by: Netzkommune GmbH
www/nginx: Add PCRE2 Support
In NGINX version 1.21.5 (former devel version) PCRE2 support was added.
Please note: several modules are required patching to support PCRE2 library, so
let's keep PCRE1 as default version for now.
While here, Update NJS to 0.7.4
Sponsored by: Netzkommune GmbH
www/nginx: Merge Options KTLS from www/nginx-devel:
New kernel TLS feature is available starting with FreeBSD 13.0,
and it requires OpenSSL 3.0, compiled with "enable-ktls" option.
Further, KTLS needs to be enabled in kernel, and in OpenSSL,
either via OpenSSL configuration file or with
ssl_conf_command Options KTLS;
in nginx configuration.
To enable kernel TLS on FreeBSD 13 and above:
# kldload ktls_ocf
# sysctl kern.ipc.tls.enable=1
to load a software backend, see man ktls(4) for details.
Also, please visit the following link to get more details
https://hg.nginx.org/nginx/rev/65946a191197
Obtained from:
https://cgit.freebsd.org/ports/commit/?id=62502a50558bbc0950693a9ea52aee738a80f0c8
Sponsored by: Netzkommune GmbH
www/nginx: changes in the njs module
@osa has brought lang/njs into the ports, so we can safely remove `njs'
command-line utility installation from the www/nginx.
PR: 262491
Reported by: osa
Sponsored by: Netzkommune GmbH
www/nginx: update third-party spnego-http-auth module
There was an error when loading the module in nginx.conf. This update also fixes
this error:
nginx: [emerg] dlopen()
"/usr/local/libexec/nginx/ngx_http_auth_spnego_module.so" failed
(/usr/local/libexec/nginx/ngx_http_auth_spnego_module.so: Undefined symbol
"__gss_krb5_mechanism_oid_desc") in /usr/local/etc/nginx/nginx.conf:7
nginx: configuration file /usr/local/etc/nginx/nginx.conf test failed
PR: 261810
Sponsored by: Netzkommune GmbH
www/nginx: Rollback 3rd Party Module NJS
Rollback the 3rd Party Module NJS from 0.71 to 0.70
The Version 0.71 needs pcre2, but this is only available from NGINX version
1.21.5 onwards
Sponsored by: Netzkommune GmbH
framework: Add new USES 'magick' for graphics/ImageMagick*
A new USES has been added to depend on ImageMagick.
USES=magick
adds a LIB_DEPENDS on graphics/ImageMagick${IMAGEMAGICK_DEFAULT}.
If a specific version is required, use for example
USES=magick:6 resp. USES=magick:7
If only a build, run or test is required, use for example
USES=magick:build resp. USES=magick:6,build,test
(Only the first 15 lines of the commit message are shown above )
www/nginx: Update to 1.20.2
Changes:
*) Feature: OpenSSL 3.0 compatibility.
*) Bugfix: SSL variables might be empty when used in logs; the bug had
appeared in 1.19.5.
*) Bugfix: keepalive connections with gRPC backends might not be closed
after receiving a GOAWAY frame.
*) Bugfix: backend SSL connections in the stream module might hang after
an SSL handshake.
*) Bugfix: SSL connections with gRPC backends might hang if select,
poll, or /dev/poll methods were used.
*) Bugfix: in the $content_length variable when using chunked transfer
encoding.
*) Bugfix: requests might hang when using HTTP/2 and the "aio_write"
directive.
Sponsored by: Netzkommune GmbH
www/nginx: switch with the 3rd party module rtmp to arut
Change of the 3rd party module rtmp to arut on GitHub.
The project is still active here and receives regular updates.
Sponsored by: Netzkommune GmbH
Refresh the kernel TLS patch.
This functionality is available with the following prerequisites:
o) security/openssl built from ports with the kTLS options defined;
o) FreeBSD 13.
Obtained from: www/nginx-devel
Sponsored by: Netzkommune GmbH
merge r559454 from www/nginx-devel:
Fix PROPFIND fail with 500 on simlinks to non exist file/dir
when nginx compiled with the third-party http_dav_ext module.
PR: 220871
Sponsored by: Netzkommune GmbH
Update third-party njs modue to 0.5.0
Changes with njs 0.5.0 01 Dec 2020
nginx modules:
*) Feature: introduced global "ngx" object.
The following methods were added:
ngx.log(level, msg)
The following properties were added:
ngx.INFO,
ngx.WARN,
ngx.ERR.
(Only the first 15 lines of the commit message are shown above )
