Package: nginx-mod Version: 1:1.30.6-4~gps1+deb12+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3811 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.6-1, nginx-mod-r1.30.6, nginx-r1.30.6 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.6-4~gps1+deb12+stable_arm64.deb Size: 973840 SHA512: 4f9b2930bac34d073381b96498e593f6136cd24eea432e0a19d06ceba27da0ccb198c05aef97966eebe54f8fa40f7ae088cf04716006c29b724084032da89076 SHA256: 430873db6af895a210012cd7afe3a2de3b8c3865553a5b35457a439e75fe0093 SHA1: 8bdbe5b5f16b4f11c3082979b5d2acc8df46c295 MD5sum: 1e83dd115e89808cb80394eaa38022ca Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod Version: 1:1.30.5-4~gps1+deb12+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3747 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.5-1, nginx-mod-r1.30.5, nginx-r1.30.5 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.5-4~gps1+deb12+stable_arm64.deb Size: 970732 SHA512: cdccfa52f6a79fb0da859d43ab9df9bff8f1b46b20aee7d97dfa2e66272222e5d04aa647aa3131f9b5ab6b876172611415b605fef6c6a1f4e9682f8f84593d8f SHA256: 9325af1b664d0e7bf6c2b7c50d4214509408ea95c0d17f3bda55399b647d2312 SHA1: 032bad2267a0e9da21f12926c79bb9d06eaa9649 MD5sum: 3252e27c5d1f4661e29b38ba88edd1d8 Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod-dbgsym Source: nginx-mod Version: 1:1.30.6-4~gps1+deb12+stable Auto-Built-Package: debug-symbols Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3740 Depends: nginx-mod (= 1:1.30.6-4~gps1+deb12+stable) Priority: optional Section: debug Filename: pool/main/n/nginx-mod/nginx-mod-dbgsym_1.30.6-4~gps1+deb12+stable_arm64.deb Size: 3396668 SHA512: 1d12d41668cfe2969ed826e94b46429c7023bc254485d0bfd30ec0ed0b91a51143a06ef78367402cdacbed8a8b0de131fc14b82ea956e44c1c63763374b3660f SHA256: 4a3820297081871bfeb680266b2b8109bb11dd3d0c12df09b811f95f3c29a10a SHA1: 53e9da0428b6aae4fa97b4064dd3b69b620fc118 MD5sum: 30237e667b98163562e23b703e6897e5 Description: debug symbols for nginx-mod Build-Ids: 95575cd5a0ace985470ada0cfb1a29aec9566735 9c8ee1ee16a5ea4dc814372f9ef774d5bb534668 Package: nginx-mod-dbgsym Source: nginx-mod Version: 1:1.30.5-4~gps1+deb12+stable Auto-Built-Package: debug-symbols Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3721 Depends: nginx-mod (= 1:1.30.5-4~gps1+deb12+stable) Priority: optional Section: debug Filename: pool/main/n/nginx-mod/nginx-mod-dbgsym_1.30.5-4~gps1+deb12+stable_arm64.deb Size: 3380536 SHA512: fefede9bd08f2ba487530abf4025ad04b93d02187aeaa8901d507b92f383467063856ac1c4721fc5161a96c10be7e32247d415c2b3a66d3c247e603108769f2d SHA256: 4cf3c9bf5f556bdcc75f694f96a135cb2c363c269196d86ea6ea9db21b45f09c SHA1: 67eb8fc7da389b8b251ccdea0196f5af8f268291 MD5sum: 26ef494de9e34db59c856c85f7ba5be3 Description: debug symbols for nginx-mod Build-Ids: 0703fc4c6ab7659bc699c97055c2bdd35a8615d0 f4e95ff5747bd7a783048d75a294bae3051d271d Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.6-4~gps1+deb12+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 120 Depends: nginx-mod (= 1:1.30.6-4~gps1+deb12+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.6-4~gps1+deb12+stable_arm64.deb Size: 87324 SHA512: d8367f7e9d061f96b6a8fca71b98236230be431258c33c64c2fa00572ef31688abdf8f64fff07532554bd2b8573ba7101d0a222bfb1f55f0c494557def68de53 SHA256: d602a6ef8f6214fa591e4a31b65547c2f869ff4ba9ea49b90294bf45f19aed09 SHA1: 75ad3adcf726f844fafb2c220e8af550cb094f58 MD5sum: bb6850c59144d9e31980c0cb76363a44 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/ Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.5-4~gps1+deb12+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 120 Depends: nginx-mod (= 1:1.30.5-4~gps1+deb12+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.5-4~gps1+deb12+stable_arm64.deb Size: 86476 SHA512: 462b1242cf93d918dd550202ec964ba971de3604d1deb204a54e4113aaf7b85c1a7e2279741c0f23f8a8b46c73ab6e82fb6cd9bda372960634aa22275fa7a1e8 SHA256: cbe32df3cdb864f957631658eeb4687fe9340caa355b4f8af766751a4c8688fb SHA1: 8bc462fdd1286277ca0f2793513bcabe175ee375 MD5sum: ae8ae912256e36604f9f57605dda7bf5 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/