summaryrefslogtreecommitdiffstats
path: root/package/nginx/nginx.mk
diff options
context:
space:
mode:
authorAdam Duskett <Aduskett@gmail.com>2016-07-15 13:45:12 -0400
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>2016-07-15 22:49:56 +0200
commit7f299f02b20fb9d194d3ca583fb702b39c346b92 (patch)
treef7bd064b1f930ed1ede437be7324b0189d665351 /package/nginx/nginx.mk
parente103967d6fd7653464041c3589b11a64e48b58c3 (diff)
downloadbuildroot-7f299f02b20fb9d194d3ca583fb702b39c346b92.tar.gz
buildroot-7f299f02b20fb9d194d3ca583fb702b39c346b92.zip
nginx-nasxi: new package
Naxsi is a third party nginx module reads a small subset of simple rules containing a list of known patterns involved in website vulnerabilities. This module behaves like a DROP-by-default firewall for nginx. Signed-off-by: Adam Duskett <aduskett@codeblue.com> [Thomas: - include Config.in file directly from package/Config.in and not from package/nginx/Config. - improve Config.in help text with more details - rename the package prompt from ngx_http_naxsi_module to nginx-naxsi - remove NGINX_NAXSI_SOURCE, and fix the definition of NGINX_NAXSI_SITE - change license from GPLv3 to GPLv2+ with OpenSSL exception - cange license file from LICENSE to naxsi_src/naxsi_json.c. The LICENSE file exists in the latest Git master of the project, but not in the 0.54 tag that we're packaging.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/nginx/nginx.mk')
-rw-r--r--package/nginx/nginx.mk5
1 files changed, 5 insertions, 0 deletions
diff --git a/package/nginx/nginx.mk b/package/nginx/nginx.mk
index 018d0f884f..d57f3d00bc 100644
--- a/package/nginx/nginx.mk
+++ b/package/nginx/nginx.mk
@@ -156,6 +156,11 @@ else
NGINX_CONF_OPTS += --without-http_gzip_module
endif
+ifeq ($(BR2_PACKAGE_NGINX_NAXSI),y)
+NGINX_DEPENDENCIES += nginx-naxsi
+NGINX_CONF_OPTS += --add-module=$(NGINX_NAXSI_DIR)/naxsi_src
+endif
+
ifeq ($(BR2_PACKAGE_NGINX_HTTP_REWRITE_MODULE),y)
NGINX_DEPENDENCIES += pcre
else
OpenPOWER on IntegriCloud