Package: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 3874 Depends: libc6 (>= 2.38), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Breaks: nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.6-1, nginx-r1.30.6 Homepage: https://nginx.org/ Priority: optional Section: httpd Filename: pool/main/n/nginx/nginx_1.30.6-22~gps1+ubuntu2604+stable_amd64.deb Size: 1032900 SHA512: 824308fe7114fb90f10f2863594177754f1814cf9a6badf960de8580877e186206bd2d55be7a71c060a8bb548024a4db8cc55d51adba8484709d76a4fff709c6 SHA256: 4f246a4f674a368f12499bca449cef97470a93b8d27adcbf70cc981ada8ac0f0 SHA1: 52f9c8634a168ad310f35a3c5cdf018d160483e2 MD5sum: 2c2db23cc2667bb90f59a7475e8bf6e1 Description: High performance web server (GetPageSpeed build) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This package provides the GetPageSpeed build of nginx with upstream-like paths, systemd units, and additional hardening. Package: nginx-common Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: all Maintainer: GetPageSpeed LLC Installed-Size: 10 Depends: nginx Homepage: https://nginx.org/ Priority: optional Section: oldlibs Filename: pool/main/n/nginx/nginx-common_1.30.6-22~gps1+ubuntu2604+stable_all.deb Size: 4564 SHA512: d978262457c9f42652e07c5685f0ec5be6ae960e915d6df5c52edc21a41ec510423abb4aa3b3b6d3a0efb2f55c7c5b48bbd44e7d7be7811c7b1c91fe8552c5f4 SHA256: aa7864949686bbc878fb9843fd645177afd7e5aa64f56c0b53ec4cc696ffc352 SHA1: ac098ef8da364e97da9eb23002789d6549eda10b MD5sum: c2dcbb1cd2e570ef4b69036123e6c231 Description: transitional dummy package for nginx (GetPageSpeed) This is a transitional package. It can be safely removed after installation. Package: nginx-core Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: all Maintainer: GetPageSpeed LLC Installed-Size: 10 Depends: nginx Homepage: https://nginx.org/ Priority: optional Section: oldlibs Filename: pool/main/n/nginx/nginx-core_1.30.6-22~gps1+ubuntu2604+stable_all.deb Size: 4568 SHA512: a49ea8f51dd1c6ebf6ba6c90016f5a7a34f03c695c07a1eccc47b5384167d60ff1b52858bd616b669b6687514b428c302321a8f4db4659836c9e3fc28867abfd SHA256: 6bc207b63b77e7f5b392b38aad18a7622325c482a177f23198c9d79fb36b16ca SHA1: d0ed69258cc7249fef17bc0c58ab32aa31ae33a3 MD5sum: 6aaefad1375c9eb14e379f42012a72e1 Description: transitional dummy package for nginx (GetPageSpeed) This is a transitional package. It can be safely removed after installation. Package: nginx-ech Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: amd64 Maintainer: GetPageSpeed LLC Installed-Size: 50 Depends: nginx (= 1:1.30.6-22~gps1+ubuntu2604+stable), openssl35 Homepage: https://nginx.org/ Priority: optional Section: httpd Filename: pool/main/n/nginx/nginx-ech_1.30.6-22~gps1+ubuntu2604+stable_amd64.deb Size: 13420 SHA512: 3c9dc23d8f116680148d48c9c52d0f2d839642f809949ad312e83ebc81239e51a4828f8a07cf9420d75041dffe022adf088e1e0dac3888f73596439c91cd6d61 SHA256: 97ff77a0f2e8804bda3895583e64b4e64c72e2567761688995216990b4221f42 SHA1: 5599e25b8dfa2a68b779a4f0ad72ad53d77d6e0c MD5sum: 789450363ecfc097031e773c9bfbdc14 Description: Encrypted Client Hello key management for nginx (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/ Package: nginx-extras Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: all Maintainer: GetPageSpeed LLC Installed-Size: 10 Depends: nginx Homepage: https://nginx.org/ Priority: optional Section: oldlibs Filename: pool/main/n/nginx/nginx-extras_1.30.6-22~gps1+ubuntu2604+stable_all.deb Size: 4568 SHA512: 29d79fccac91c8ee7d5e92f087bf2463f307b7f9489e6647e475f7eaabdc45dedf0edda07149f8fbad7be900c5830369247e57abba02691a68c9343afb7e3566 SHA256: 534168da905844ca4b1c83c2545b6be6f85a0a2602eba79a3d69df3b1bd8586d SHA1: 9f281169d0ddf36b17033216864f699debce009a MD5sum: e50c476d23c30da3e5b08dbb63e929ce Description: transitional dummy package for nginx (GetPageSpeed) This is a transitional package. It can be safely removed after installation.