Package: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 3862 Depends: libc6 (>= 2.38), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser Recommends: logrotate Breaks: nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Replaces: nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light Provides: httpd, nginx, nginx-abi-1.30.6-1, nginx-r1.30.6 Homepage: https://nginx.org/ Priority: optional Section: httpd Filename: pool/main/n/nginx/nginx_1.30.6-22~gps1+ubuntu2604+stable_arm64.deb Size: 943728 SHA512: fedba484bee5a5b0b1a0e27df0161bb27b5331db8ca22efdb2839fca960cc7cc918900adba1e49ef979b91f532bfaa7bcdd806d8ea0e0fa980c2b86598db9d8a SHA256: 9a69a6813efd04cedc9ef935ae7533c38461e8fd28a0b366d74f507bb7bbf005 SHA1: 5fd1feca8210645f5f863aa82d0b4ddee3295bb4 MD5sum: 61f7ddd57e248a1d29cc46842e24a8cb Description: High performance web server (GetPageSpeed build) nginx [engine x] is an HTTP and reverse proxy server, as well as a mail proxy server. . This package provides the GetPageSpeed build of nginx with upstream-like paths, systemd units, and additional hardening. Package: nginx-common Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: all Maintainer: GetPageSpeed LLC Installed-Size: 10 Depends: nginx Homepage: https://nginx.org/ Priority: optional Section: oldlibs Filename: pool/main/n/nginx/nginx-common_1.30.6-22~gps1+ubuntu2604+stable_all.deb Size: 4564 SHA512: d978262457c9f42652e07c5685f0ec5be6ae960e915d6df5c52edc21a41ec510423abb4aa3b3b6d3a0efb2f55c7c5b48bbd44e7d7be7811c7b1c91fe8552c5f4 SHA256: aa7864949686bbc878fb9843fd645177afd7e5aa64f56c0b53ec4cc696ffc352 SHA1: ac098ef8da364e97da9eb23002789d6549eda10b MD5sum: c2dcbb1cd2e570ef4b69036123e6c231 Description: transitional dummy package for nginx (GetPageSpeed) This is a transitional package. It can be safely removed after installation. Package: nginx-core Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: all Maintainer: GetPageSpeed LLC Installed-Size: 10 Depends: nginx Homepage: https://nginx.org/ Priority: optional Section: oldlibs Filename: pool/main/n/nginx/nginx-core_1.30.6-22~gps1+ubuntu2604+stable_all.deb Size: 4568 SHA512: a49ea8f51dd1c6ebf6ba6c90016f5a7a34f03c695c07a1eccc47b5384167d60ff1b52858bd616b669b6687514b428c302321a8f4db4659836c9e3fc28867abfd SHA256: 6bc207b63b77e7f5b392b38aad18a7622325c482a177f23198c9d79fb36b16ca SHA1: d0ed69258cc7249fef17bc0c58ab32aa31ae33a3 MD5sum: 6aaefad1375c9eb14e379f42012a72e1 Description: transitional dummy package for nginx (GetPageSpeed) This is a transitional package. It can be safely removed after installation. Package: nginx-ech Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: arm64 Maintainer: GetPageSpeed LLC Installed-Size: 50 Depends: nginx (= 1:1.30.6-22~gps1+ubuntu2604+stable), openssl35 Homepage: https://nginx.org/ Priority: optional Section: httpd Filename: pool/main/n/nginx/nginx-ech_1.30.6-22~gps1+ubuntu2604+stable_arm64.deb Size: 13420 SHA512: 4ab63e38a5fe484be8677c6bac2dfe10aa26bf18e5a3c343c68643da291f670c62a1f06f4a80d0ac89e454ad0590f5000f2b398f52cba985082596aa5f6d61fd SHA256: e602aa4a44061bc18f8a4910fba49d97a3f034dc14598d26e3d779ec95a0e67f SHA1: 3fa9a03867e57a7c33782023e4f258c438f0e076 MD5sum: 1e87eb15f9d3008b540d6f1484f2de4b Description: Encrypted Client Hello key management for nginx (GetPageSpeed) Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849). . nginx reads ECH keys while parsing its configuration, so a new key only takes effect on reload, and a client that picked up an older ECHConfigList from a cached HTTPS DNS record still needs the key it encrypted to. nginx handles that by accepting several ssl_ech_file directives: the first is advertised in retry-configs, the rest stay loaded for decryption only. . This package ships nginx-ech-keygen, which maintains that rolling set under /etc/nginx/ech and regenerates the include listing them, plus a systemd timer that rotates on a schedule, plus nginx-ech-publish, which republishes the rotated ECHConfigList in the HTTPS DNS record through provider drop-in scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish). . The timer is not enabled on install and nothing happens until you configure it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run "nginx-ech-keygen --init", publish the value it prints in the HTTPS record for your ECH-enabled names, then "systemctl enable --now nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish and that record is republished automatically after every rotation. . ECH only helps if the HTTPS record is served from a DNS-only zone and clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/ Package: nginx-extras Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: all Maintainer: GetPageSpeed LLC Installed-Size: 10 Depends: nginx Homepage: https://nginx.org/ Priority: optional Section: oldlibs Filename: pool/main/n/nginx/nginx-extras_1.30.6-22~gps1+ubuntu2604+stable_all.deb Size: 4568 SHA512: 29d79fccac91c8ee7d5e92f087bf2463f307b7f9489e6647e475f7eaabdc45dedf0edda07149f8fbad7be900c5830369247e57abba02691a68c9343afb7e3566 SHA256: 534168da905844ca4b1c83c2545b6be6f85a0a2602eba79a3d69df3b1bd8586d SHA1: 9f281169d0ddf36b17033216864f699debce009a MD5sum: e50c476d23c30da3e5b08dbb63e929ce Description: transitional dummy package for nginx (GetPageSpeed) This is a transitional package. It can be safely removed after installation. Package: nginx-full Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: all Maintainer: GetPageSpeed LLC Installed-Size: 10 Depends: nginx Homepage: https://nginx.org/ Priority: optional Section: oldlibs Filename: pool/main/n/nginx/nginx-full_1.30.6-22~gps1+ubuntu2604+stable_all.deb Size: 4568 SHA512: 7fc7838b500e86ef7a7f8b8fd87747801da5f1c1c33aca8b19dbc9c65c5a3f15ad19ddc1d7b4ba78fd4572e08ea8292a766802866d2f55c2c5b235699dca328d SHA256: dbb0eae8ee24fad948c2dbc66572bdbfb2a84bac921e60dfb01bdab770ef1be8 SHA1: 06a6b016899c80227aab8b85afb3c379e0c42969 MD5sum: faec03dbb12c4bab32b36b030877997b Description: transitional dummy package for nginx (GetPageSpeed) This is a transitional package. It can be safely removed after installation. Package: nginx-light Source: nginx Version: 1:1.30.6-22~gps1+ubuntu2604+stable Architecture: all Maintainer: GetPageSpeed LLC Installed-Size: 10 Depends: nginx Homepage: https://nginx.org/ Priority: optional Section: oldlibs Filename: pool/main/n/nginx/nginx-light_1.30.6-22~gps1+ubuntu2604+stable_all.deb Size: 4568 SHA512: c2f1c8fb92f15f5d50e8e77f1a3d9db11bdb556c72a9ba7b994d176ba66ac6d603a0b5ab21c7212279d208d2e49dc0bdcaf44f325349c1695d3f517766d0ec39 SHA256: 82532ea33d126d9501865f6ebef3dc0efcd08c65dca4b3ed00022fe92ce5e20c SHA1: 9b4cf2ba1019ddf517403cc9807db3ae8aceaeb6 MD5sum: 47b411d7e65c004809f6c8ea02c75319 Description: transitional dummy package for nginx (GetPageSpeed) This is a transitional package. It can be safely removed after installation. Package: nginx-owasp-crs Version: 4.30.0-1~gps1+ubuntu2604+stable Architecture: all Maintainer: GetPageSpeed Installed-Size: 981 Depends: nginx, libmodsecurity3 (>= 3.0.8) Homepage: https://coreruleset.org/ Priority: optional Section: httpd Filename: pool/main/n/nginx-owasp-crs/nginx-owasp-crs_4.30.0-1~gps1+ubuntu2604+stable_all.deb Size: 159084 SHA512: e64e5e279f3b601d8e9042f3bf6a3c221c8f27d683ed5f0e18cda2e54160c8bba48428523d2cf0acd415dde585a25e9953964adfab543f95a9b85f15a269b2b2 SHA256: d6a1ebb59fea32f2aa50b981f9ed03493fcda81644ac9a5295b02f4c9854869d SHA1: dc675bde885f5f0a35069291fc9e657aa679457d MD5sum: bd87b90769ed680fdd6f505e2cabe36b Description: OWASP ModSecurity Core Rule Set for NGINX The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts. . This package installs the rule set under /etc/nginx/owasp-modsecurity-crs/ and provides a ready-to-use include manifest at /etc/nginx/modsec_includes.conf for loading with the ModSecurity-nginx connector.