Package: nginx-mod Version: 1:1.30.6-4~gps1+deb12+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 3799 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.6-1, nginx-mod-r1.30.6, nginx-r1.30.6 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.6-4~gps1+deb12+stable_amd64.deb Size: 1048144 SHA512: b0fee0cea49b30c392cef80c75b77d13a2cecf15c0925586a21cfb0fa6d3c517a5190b0b95986ba0a7f53c394bad245ad609dc6079538d9cdaa29e6e1f9b5308 SHA256: 7828863a756a18ecaa3f9c76adceb733546af754f0ccd6e5a502121080f48e43 SHA1: a153f16ec87995779fcbf2f9438b3abbbeee3d25 MD5sum: f7571bede35d47412a3a5052dc257157 Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod Version: 1:1.30.5-4~gps1+deb12+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 3799 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.5-1, nginx-mod-r1.30.5, nginx-r1.30.5 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.5-4~gps1+deb12+stable_amd64.deb Size: 1047152 SHA512: 3021e2381a2c085cceee9f1caef74b53d9b98aba54cceacb16039886f2fba6d33acd6b7c0aba882202d85bf4f2170dce6d19e0fee8e30211f52946e7bdf67e3e SHA256: bc9a897a3455cc9a4e2bc92cb5475b0511f9c99c3bee9e9908c9272808771ec4 SHA1: 4aa63bbb364133360e330375598b88d3bb70c8a2 MD5sum: 98bd5b8f1c181dd678c0fc7f5574da5c Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod-dbgsym Source: nginx-mod Version: 1:1.30.6-4~gps1+deb12+stable Auto-Built-Package: debug-symbols Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 3755 Depends: nginx-mod (= 1:1.30.6-4~gps1+deb12+stable) Priority: optional Section: debug Filename: pool/main/n/nginx-mod/nginx-mod-dbgsym_1.30.6-4~gps1+deb12+stable_amd64.deb Size: 3457600 SHA512: 65ee2e16ac2dae8862d200b483d30f55170d7cb1322367730d7bb3f13e7440ec418fbed267b92fd968e3f733ce207bb29e5d4daf2ceb4042dcd10a3d6b75381f SHA256: 5866a0e02ab80069eaa4d91a1bd81e3c1c7c117f6ce456dfb16312df8379b7c9 SHA1: e6c931f8f4bdff9c77d2fd0e69c3d6eef140d771 MD5sum: 6e3e4a5439d53f2cd7009c421bf26d80 Description: debug symbols for nginx-mod Build-Ids: be3259658b17ed08703ed279f656410db4a183a8 d8a8b6aaf417ab46fb78a5e067e49b570238101c Package: nginx-mod-dbgsym Source: nginx-mod Version: 1:1.30.5-4~gps1+deb12+stable Auto-Built-Package: debug-symbols Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 3731 Depends: nginx-mod (= 1:1.30.5-4~gps1+deb12+stable) Priority: optional Section: debug Filename: pool/main/n/nginx-mod/nginx-mod-dbgsym_1.30.5-4~gps1+deb12+stable_amd64.deb Size: 3434928 SHA512: ebdbc07904984d45a4f07b711baa47bb1fb8beb27eba27aba28eb0b107edb3d09ffddcbeeff7518cbf901059d5e3e2c747a468bf104e20f1eee6a8920610f10e SHA256: 67e968a71d76a39561fb2d9412df6a3b01e22ffde6a67684425ee03ef6deb63e SHA1: c5f60aa01a257a4ba343712836633d8e9d452e72 MD5sum: e6d176393eb30386176c9a8e6c7d6e3b Description: debug symbols for nginx-mod Build-Ids: 14cad07a95c58005910c7a31ce2b1b551c47c1c4 1c0c24d2f3b4964ae94e3557b2a03a6495b2f5a4 Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.6-4~gps1+deb12+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 120 Depends: nginx-mod (= 1:1.30.6-4~gps1+deb12+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.6-4~gps1+deb12+stable_amd64.deb Size: 87324 SHA512: 5b3597a0c8f98c7a4914521fdb67e7a85ac3ba52e35b45f7df3c9c2deda186c1cbc9f3999f30fb0f3d65c85cf8d3088ef1f10f85504226a523461f5ebe215c11 SHA256: 3a262c0906b9e4e7af6d3e47f376fbab9fa977bebd26fbee3f3d5393cae5b294 SHA1: 0460619733c87a38de425fa1df00727e328c9462 MD5sum: 827f37a5a4861efce2bd546799e85db5 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/ Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.5-4~gps1+deb12+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 120 Depends: nginx-mod (= 1:1.30.5-4~gps1+deb12+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.5-4~gps1+deb12+stable_amd64.deb Size: 86476 SHA512: 5fa936dad12c50bb380a9b639d03dd7323f1a95ceddf267ad4b9970aed8db7dc253e40d1e49f6492af6e81e127b45e9c68aa8ce5c4d99bd4eb392e9b8e416d90 SHA256: 81bf48e0537e648bb958138cda4729de513fa1f8eea47e3604bbadce04ac807c SHA1: 78d015ce2788277935a55308ea0510be058deb3c MD5sum: 67e1e1157d3e34880827a856192993bf Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/