Package: nginx-mod
Version: 1:1.30.6-4~gps1+ubuntu2604+stable
Architecture: amd64
Maintainer: GetPageSpeed LLC <builder@getpagespeed.com>
Installed-Size: 3955
Depends: libc6 (>= 2.38), libcrypt1 (>= 1:4.1.0), libpcre2-8-0 (>= 10.22), openssl35-libs (>= 3.5.8), zlib1g (>= 1:1.1.4), adduser
Recommends: logrotate
Conflicts: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light
Breaks: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light
Replaces: nginx, nginx-common, nginx-core, nginx-extras, nginx-full, nginx-light
Provides: httpd, nginx, nginx-abi-1.30.6-1, nginx-mod-r1.30.6, nginx-r1.30.6
Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build
Priority: optional
Section: httpd
Filename: pool/main/n/nginx-mod/nginx-mod_1.30.6-4~gps1+ubuntu2604+stable_amd64.deb
Size: 1056596
SHA512: 252847f54345c3396cb56085391a4c4fd6ffc998b4cc7febd9fe2de4ec662d0839026fdada9113bddcfaa5af425b5d9f9c4c9c8cf9d5bd87fc7542698c2c09f5
SHA256: f3fa1474d75dddf81b508922368596d0c5fe8787a4bef538500d200a4af99953
SHA1: 43564bbd07ea1ea3fe6894234bfc38a4a7207a70
MD5sum: 195d480e9bc3af1798fb3e46136e2db6
Description: High performance web server with GetPageSpeed patches (nginx-mod)
 nginx [engine x] is an HTTP and reverse proxy server, as well as a mail
 proxy server.
 .
 This is the GetPageSpeed "nginx-mod" build: stable nginx with an opinionated
 patch set (extended limit_req_rate units r/h, r/d, r/w, r/M, r/Y; dynamic
 TLS records; HTTP/3 :authority -> Host mapping; natural-sort autoindex;
 slow_start support; stricter max_headers default; dark-mode error pages)
 and two extra statically-built modules:
 .
   * ngx_http_upstream_check_module - active backend health checks
   * ngx_http_upstream_api_module   - NGINX Plus-compatible dynamic
                                      upstream management
 .
 nginx-mod is ABI-compatible with our stable nginx. Dynamic modules from
 the stable channel (extras.getpagespeed.com codename suite) load against
 it without rebuild.

Package: nginx-mod-ech
Source: nginx-mod
Version: 1:1.30.6-4~gps1+ubuntu2604+stable
Architecture: amd64
Maintainer: GetPageSpeed LLC <builder@getpagespeed.com>
Installed-Size: 48
Depends: nginx-mod (= 1:1.30.6-4~gps1+ubuntu2604+stable), openssl35
Homepage: https://www.getpagespeed.com/server-setup/nginx-mod-a-better-faster-nginx-build
Priority: optional
Section: httpd
Filename: pool/main/n/nginx-mod/nginx-mod-ech_1.30.6-4~gps1+ubuntu2604+stable_amd64.deb
Size: 11664
SHA512: b393e25c873d0e7d18509963214c0473a1ffa84b868d05e27c5b7df891514531d51abfc4efc92ed00ba12439962981e49508f1197913e382aeaaad637c2d4320
SHA256: a17bfb5b6cfd240a51634dbd9dace67eac8df74c02d2417c4dc88cb025da919f
SHA1: 99f58ea21ddf59f915cd3ed4432303c48ada5662
MD5sum: 7a0afcd9c0776087efdc4d452e7a6ad7
Description: Encrypted Client Hello key management for nginx-mod (GetPageSpeed)
 Key generation and rotation for Encrypted Client Hello (ECH, RFC 9849).
 .
 nginx reads ECH keys while parsing its configuration, so a new key only
 takes effect on reload, and a client that picked up an older ECHConfigList
 from a cached HTTPS DNS record still needs the key it encrypted to. nginx
 handles that by accepting several ssl_ech_file directives: the first is
 advertised in retry-configs, the rest stay loaded for decryption only.
 .
 This package ships nginx-ech-keygen, which maintains that rolling set under
 /etc/nginx/ech and regenerates the include listing them, plus a systemd
 timer that rotates on a schedule, plus nginx-ech-publish, which republishes
 the rotated ECHConfigList in the HTTPS DNS record through provider drop-in
 scripts (Cloudflare shipped; more under /usr/libexec/nginx-ech-publish).
 .
 The timer is not enabled on install and nothing happens until you configure
 it. Set ECH_PUBLIC_NAME in /etc/default/nginx-ech-rotate, run
 "nginx-ech-keygen --init", publish the value it prints in the HTTPS record
 for your ECH-enabled names, then "systemctl enable --now
 nginx-ech-rotate.timer". Set a provider in /etc/default/nginx-ech-publish
 and that record is republished automatically after every rotation.
 .
 ECH only helps if the HTTPS record is served from a DNS-only zone and
 clients resolve over DoH. See https://nginx-extras.getpagespeed.com/ech/