Skip to content

Instantly share code, notes, and snippets.

@rcguy
Last active Jan 13, 2017
Embed
What would you like to do?
#!/bin/bash
# Dependencies
# * checkinstall: package the .deb
# * libpcre3, libpcre3-dev: required for HTTP rewrite module
# * zlib1g zlib1g-dbg zlib1g-dev: required for HTTP gzip module
# vars
OPENSSL_VER="1.1.0c"
NGINX_VER="1.11.8"
apt update
apt install checkinstall libpcre3 libpcre3-dev zlib1g zlib1g-dbg zlib1g-dev unzip -y
mkdir -p ~/sources/
# Compile against OpenSSL to enable NPN
cd ~/sources
wget http://www.openssl.org/source/openssl-$OPENSSL_VER.tar.gz
tar -xzvf openssl-$OPENSSL_VER.tar.gz
rm openssl-$OPENSSL_VER.tar.gz
# Get the Nginx source.
# Best to get the latest mainline release. Of course, your mileage may vary depending on future changes
cd ~/sources/
wget http://nginx.org/download/nginx-$NGINX_VER.tar.gz
tar zxf nginx-$NGINX_VER.tar.gz
cd nginx-$NGINX_VER
rm nginx-$NGINX_VER.tar.gz
# Configure nginx.
# This is based on the default package in Debian.
CFLAGS="$(dpkg-buildflags --get CFLAGS)"
LDFLAGS="$(dpkg-buildflags --get LDFLAGS)"
./configure \
--prefix=/etc/nginx \
--sbin-path=/usr/sbin/nginx \
--conf-path=/etc/nginx/nginx.conf \
--error-log-path=/var/log/nginx/error.log \
--http-log-path=/var/log/nginx/access.log \
--pid-path=/var/run/nginx.pid \
--lock-path=/var/run/nginx.lock \
--http-client-body-temp-path=/var/cache/nginx/client_temp \
--http-proxy-temp-path=/var/cache/nginx/proxy_temp \
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
--http-scgi-temp-path=/var/cache/nginx/scgi_temp \
--user=www-data \
--group=www-data \
--with-http_ssl_module \
--with-http_realip_module \
--with-http_addition_module \
--with-http_sub_module \
--with-http_dav_module \
--with-http_flv_module \
--with-http_mp4_module \
--with-http_gunzip_module \
--with-http_gzip_static_module \
--with-http_random_index_module \
--with-http_secure_link_module \
--with-http_stub_status_module \
--with-http_auth_request_module \
--with-threads \
--with-stream \
--with-stream_ssl_module \
--with-http_slice_module \
--with-mail \
--with-mail_ssl_module \
--with-file-aio \
--with-http_v2_module \
--with-cc-opt="$CFLAGS" \
--with-ld-opt="$LDFLAGS" \
--with-ipv6 \
--with-debug \
--with-openssl=$HOME/sources/openssl-$OPENSSL_VER
# Make the package.
make
# Create a .deb package.
# Instead of running `make install`, create a .deb and install from there. This
# allows you to easily uninstall the package if there are issues.
checkinstall --install=no -y
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment