Package: nginx-mod Version: 1:1.30.5-4~gps1+deb12+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3747 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.5-1, nginx-mod-r1.30.5, nginx-r1.30.5 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.5-4~gps1+deb12+stable_arm64.deb Size: 970732 SHA512: cdccfa52f6a79fb0da859d43ab9df9bff8f1b46b20aee7d97dfa2e66272222e5d04aa647aa3131f9b5ab6b876172611415b605fef6c6a1f4e9682f8f84593d8f SHA256: 9325af1b664d0e7bf6c2b7c50d4214509408ea95c0d17f3bda55399b647d2312 SHA1: 032bad2267a0e9da21f12926c79bb9d06eaa9649 MD5sum: 3252e27c5d1f4661e29b38ba88edd1d8 Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod Version: 1:1.30.4-4~gps1+deb12+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3747 Depends: libc6 (>= 2.34), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.4-1, nginx-mod-r1.30.4, nginx-r1.30.4 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod_1.30.4-4~gps1+deb12+stable_arm64.deb Size: 970900 SHA512: 1225010b421075ca921d2045abbdb8d6cdb4078dd650450bfc5b929f3415c508959d3ece67d1e53be6a2b01776102ac1bbf289f1c06ccc58c35954df32abd2e1 SHA256: 90a59ad223df9ce6b9df079fb4538dd2a7c30d0b57ade737c339d61c1873ab7a SHA1: d7b39b0883905a674427cf377dd5332bd7b8c4ea MD5sum: 668447a2dda7365abd3c8942098717ff Description: High performance web server with GetPageSpeed patches (nginx-mod) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex; slow_start support; stricter max_headers default; dark-mode error pages) and two extra statically-built modules: . * ngx_http_upstream_check_module - active backend health checks * ngx_http_upstream_api_module - NGINX Plus-compatible dynamic upstream management . nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from the stable channel (extras.getpagespeed.com codename suite) load against it without rebuild. Package: nginx-mod-dbgsym Source: nginx-mod Version: 1:1.30.5-4~gps1+deb12+stable Auto-Built-Package: debug-symbols Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3721 Depends: nginx-mod (= 1:1.30.5-4~gps1+deb12+stable) Priority: optional Section: debug Filename: pool/main/n/nginx-mod/nginx-mod-dbgsym_1.30.5-4~gps1+deb12+stable_arm64.deb Size: 3380536 SHA512: fefede9bd08f2ba487530abf4025ad04b93d02187aeaa8901d507b92f383467063856ac1c4721fc5161a96c10be7e32247d415c2b3a66d3c247e603108769f2d SHA256: 4cf3c9bf5f556bdcc75f694f96a135cb2c363c269196d86ea6ea9db21b45f09c SHA1: 67eb8fc7da389b8b251ccdea0196f5af8f268291 MD5sum: 26ef494de9e34db59c856c85f7ba5be3 Description: debug symbols for nginx-mod Build-Ids: 0703fc4c6ab7659bc699c97055c2bdd35a8615d0 f4e95ff5747bd7a783048d75a294bae3051d271d Package: nginx-mod-dbgsym Source: nginx-mod Version: 1:1.30.4-4~gps1+deb12+stable Auto-Built-Package: debug-symbols Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3721 Depends: nginx-mod (= 1:1.30.4-4~gps1+deb12+stable) Priority: optional Section: debug Filename: pool/main/n/nginx-mod/nginx-mod-dbgsym_1.30.4-4~gps1+deb12+stable_arm64.deb Size: 3380920 SHA512: e23773c97fcd9c308e9f8ff2b652081ad123a1961eb4a72f364d35bb149939c9635a77d7cee5c07fd798e2574680c3652f5328b627983c5a3ec31ef0cd2e6acd SHA256: 9f06b376208975693e9d2ef0c3b5fd5b8965db0c6c9350b8c559ddf1147dfed8 SHA1: 5ce51c965976799e49442826f68e00e762e126c5 MD5sum: 6f00687a6d9180b1e7514932edbe0c31 Description: debug symbols for nginx-mod Build-Ids: 59561a46ac1123722045ffe1d4ea78dbffc6b539 84b47b54d03ab8cec5ac479557e43deebe2ca21f Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.5-4~gps1+deb12+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 120 Depends: nginx-mod (= 1:1.30.5-4~gps1+deb12+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.5-4~gps1+deb12+stable_arm64.deb Size: 86476 SHA512: 462b1242cf93d918dd550202ec964ba971de3604d1deb204a54e4113aaf7b85c1a7e2279741c0f23f8a8b46c73ab6e82fb6cd9bda372960634aa22275fa7a1e8 SHA256: cbe32df3cdb864f957631658eeb4687fe9340caa355b4f8af766751a4c8688fb SHA1: 8bc462fdd1286277ca0f2793513bcabe175ee375 MD5sum: ae8ae912256e36604f9f57605dda7bf5 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/ Package: nginx-mod-ech Source: nginx-mod Version: 1:1.30.4-4~gps1+deb12+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 120 Depends: nginx-mod (= 1:1.30.4-4~gps1+deb12+stable), openssl35 Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build Priority: optional Section: httpd Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.4-4~gps1+deb12+stable_arm64.deb Size: 86404 SHA512: b7c548052ad2cf58dd1bb853afca3552f8cfdff5b56e7aaa83542fda84b8f990d7fc92b2478d087a6a589df431337de894c78af1239db73d485d81bc611a7904 SHA256: 6d5700690081b394f2a42b91cda16278dcfc2daa1d71d8586073c4cf307720f6 SHA1: 72051f36d84de734bfb29b369dcb6cd7b0cf6289 MD5sum: 638d971aed1578a41d6a5f47836af7a9 Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/