Overview

File nginx.spec of Package nginx

#
# spec file for package nginx
#
# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#


%{!?vim_data_dir:%global vim_data_dir %{_datadir}/vim/%(readlink %{_datadir}/vim/current)}
%define src_install_dir %{_prefix}/src/%{name}
# keep in sync with #ngx_conditionals
%bcond_with    ngx_cpp_test
%bcond_with    ngx_google_perftools

# LibertaCasa - custom configuration and modules
%bcond_without apparmor_reload
%bcond_without conf
%bcond_without modsecurity
%bcond_without error

Name:           nginx
Version:        1.25.1
Release:        0
Summary:        A HTTP server and IMAP/POP3 proxy server
License:        BSD-2-Clause
Group:          Productivity/Networking/Web/Proxy
URL:            https://nginx.org
Source0:        https://nginx.org/download/%{name}-%{version}.tar.gz
Source1:        https://nginx.org/download/%{name}-%{version}.tar.gz.asc
Source2:        https://nginx.org/keys/thresh.key#/%{name}.keyring
Source3:        %{name}.rpmlintrc
Source4:        %{name}.logrotate
Source5:        %{name}.service
Source6:        %{name}.sysusers
Source7:        https://github.com/SpiderLabs/ModSecurity-nginx/releases/download/v1.0.3/modsecurity-nginx-v1.0.3.tar.gz
Source8:        coreruleset-3.3.4.tar.gz
# PATCH-FIX-UPSTREAM nginx-1.11.2-no_Werror.patch
Patch0:         %{name}-1.11.2-no_Werror.patch
# PATCH-FIX-OPENSUSE nginx-1.11.2-html.patch
Patch1:         %{name}-1.11.2-html.patch
# PATCH-FIX-UPSTREAM nginx-1.2.4-perl_vendor_install.patch
Patch2:         %{name}-1.2.4-perl_vendor_install.patch
# PATCH-FIX-UPSTREAM fix /etc/nginx/nginx.conf to suit Linux env
Patch3:         %{name}-1.6.1-default_config.patch
# PATCH-FIX-UPSTREAM nginx-aio.patch fix support for Linux AIO
Patch4:         %{name}-aio.patch
# PATCH-FIX-LIBERTACASA enable ModSecurity globally
Patch5:         %{name}-conf-modsecurity.patch
# PATCH-FIX-LIBERTACASA custom base configuration
Patch6:         %{name}-libertacasa-default_config.patch
BuildRequires:  %{name}-macros
BuildRequires:  gcc-c++
BuildRequires:  libatomic-ops-devel
BuildRequires:  pkgconfig
BuildRequires:  sysuser-shadow
BuildRequires:  sysuser-tools
BuildRequires:  vim
BuildRequires:  pkgconfig(libpcre2-8)
BuildRequires:  pkgconfig(libxslt)
BuildRequires:  pkgconfig(openssl)
BuildRequires:  pkgconfig(systemd)
BuildRequires:  pkgconfig(zlib)
%requires_eq    perl
Recommends:     %{name}-module-fancyindex
Recommends:     %{name}-module-geoip2
Recommends:     %{name}-module-headers-more
Recommends:     %{name}-module-http-flv
Recommends:     logrotate
Provides:       http_daemon
Provides:       httpd
%{?systemd_ordering}
%sysusers_requires
#
%if %{with ngx_google_perftools}
BuildRequires:  google-perftools-devel
%endif
%if %{with apparmor_reload}
BuildRequires:  apparmor-rpm-macros
%endif
%if %{with modsecurity}
BuildRequires:  modsecurity
BuildRequires:  modsecurity-devel
%endif

%description
%{name} [engine x] is a HTTP server and IMAP/POP3 proxy server written by Igor Sysoev.
It has been running on many heavily loaded Russian sites for more than two years.

%package source
Summary:        The nginx source
Group:          Development/Sources
Requires:       gcc-c++
Requires:       libatomic-ops-devel
Requires:       nginx = %{version}
Requires:       pkgconfig
Requires:       vim
Requires:       pkgconfig(libpcre2-8)
Requires:       pkgconfig(libxslt)
Requires:       pkgconfig(openssl)
Requires:       pkgconfig(zlib)
%requires_ge    %{name}-macros
BuildArch:      noarch

%description source
The source of %{name} [engine x] HTTP server and IMAP/POP3 proxy server.

%prep
%if %{with modsecurity}
%setup -n modsecurity-nginx-v1.0.3 -D -b 7 -T
cd ..
mv modsecurity-nginx-v1.0.3 modsecurity
%setup -n coreruleset-3.3.4 -D -b 8 -T
cd ..
mv coreruleset-3.3.4 coreruleset
%setup -q -T -b 0
%else
%setup -q
%endif
%patch0 -p1
%patch1 -p1
%patch2
%if %{with conf}
%patch6
%else
%patch3
%endif
%patch4 -p1
%if %{with modsecurity}
%patch5
%endif

perl -pi -e 's|\r\n|\n|g' contrib/geo2nginx.pl
# we just use lib here because nginx loads them relative to _prefix
perl -pi -e 's|#LIBDIR#|%{_lib}|g' conf/nginx.conf

%if %{with systemd}
%if !%{with conf}
sed -i "s/\/var\/run/\/run/" conf/nginx.conf
%endif
%endif

sed -i 's/^\(#define NGX_LISTEN_BACKLOG \).*/\1-1/' src/os/unix/ngx_linux_config.h

%build
%{ngx_configure}

%make_build
%sysusers_generate_pre %{SOURCE6} %{name} %{name}.conf

%install
%make_install
%perl_process_packlist

install -dpm0750 %{buildroot}%{ngx_home}/{,tmp,proxy,fastcgi,scgi,uwsgi}
install -Dpm0644 %{SOURCE4} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
install -Dpm0644 %{SOURCE5} %{buildroot}%{_unitdir}/%{name}.service
install -Dpm0644 %{SOURCE6} %{buildroot}%{_sysusersdir}/%{name}.conf
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}

# LibertaCasa - additional files and directories
install -Ddm0750 %{buildroot}%{ngx_cache_dir}
install -Ddm0750 %{buildroot}%{ngx_snippets_dir}
install -Ddm0750 %{buildroot}%{ngx_conf_dir}/vhosts.d
install -Ddm0750 %{buildroot}%{ngx_conf_dir}/conf.d
install -Ddm0755 %{buildroot}%{_sysconfdir}/apparmor.d/local
install -m0644 %{_sourcedir}/nginx-libertacasa%{_sysconfdir}/apparmor.d/usr.sbin.%{name} %{buildroot}%{_sysconfdir}/apparmor.d
install -m0644 %{_sourcedir}/nginx-libertacasa%{_sysconfdir}/apparmor.d/local/usr.sbin.%{name} %{buildroot}%{_sysconfdir}/apparmor.d/local
%if %{with error}
find %{_sourcedir}/nginx-libertacasa/%{ngx_snippets_dir} -type f -exec install -m 0640 '{}' %{buildroot}%{ngx_snippets_dir} \;
find %{_sourcedir}/nginx-libertacasa/%{ngx_conf_dir}/vhosts.d -type f -name '*.conf' -exec install -m 0640 '{}' %{buildroot}%{ngx_conf_dir}/vhosts.d \;
find %{_sourcedir}/nginx-libertacasa/%{ngx_conf_dir}/conf.d -type f -name '*.conf' -exec install -m 0640 '{}' %{buildroot}%{ngx_conf_dir}/conf.d \;
install -Ddm0750 %{buildroot}%{ngx_error_dir}/_errors/images
install -m0640 %{_sourcedir}/nginx-libertacasa%{ngx_error_dir}/_errors/main.css %{buildroot}%{ngx_error_dir}/_errors
install -m0640 %{_sourcedir}/nginx-libertacasa%{ngx_error_dir}/_errors/images/teapot.jpg %{buildroot}%{ngx_error_dir}/_errors/images
find %{_sourcedir}/nginx-libertacasa%{ngx_error_dir} -type f -name '*.html' -exec install -m 0640 '{}' %{buildroot}%{ngx_error_dir} \;
%endif
%if %{with modsecurity}
install -Ddm0750 %{buildroot}%{ngx_security_dir}/rules
install -Ddm0750 %{buildroot}%{ngx_log_dir}/modsecurity
install -m0640 %{_sourcedir}/nginx-libertacasa%{ngx_snippets_dir}/modsecurity %{buildroot}%{ngx_snippets_dir}
install -m0640 %{_sourcedir}/nginx-libertacasa%{ngx_security_dir}/modsecurity_includes.conf %{buildroot}%{ngx_security_dir}
install -m0640 %{_sourcedir}/nginx-libertacasa%{ngx_security_dir}/modsecurity.conf %{buildroot}%{ngx_security_dir}
install -m0640 %{_sourcedir}/nginx-libertacasa%{ngx_security_dir}/crs-setup.conf %{buildroot}%{ngx_security_dir}
install -m0640 %{_datadir}/modsecurity/unicode.mapping %{buildroot}%{ngx_security_dir}
find %{_builddir}/coreruleset/rules -type f -exec install -m 0640 '{}' %{buildroot}%{ngx_security_dir}/rules \;
%endif

rm %{buildroot}/srv/www/htdocs/index.html

mkdir -p %{buildroot}%{ngx_doc_dir}
cp -av CHANGES* LICENSE \
  %{buildroot}%{ngx_doc_dir}

mkdir -p %{buildroot}%{_datadir}/%{name}/
mkdir -p %{buildroot}%{ngx_conf_dir}/vhosts.d/
mkdir -p %{buildroot}%{ngx_conf_dir}/conf.d/

chmod a+rx contrib/geo2nginx.pl
cp -av contrib/geo2nginx.pl contrib/unicode2nginx/ \
  %{buildroot}%{_datadir}/%{name}/

mkdir -p %{buildroot}%{src_install_dir}
tar -xzf %{SOURCE0} --strip-components=1 -C %{buildroot}%{src_install_dir}

copydocs() {
  subdir=$1;
  shift;
  mkdir -p %{buildroot}%{ngx_doc_dir}/$subdir/
  pushd $subdir
  cp -av $* %{buildroot}%{ngx_doc_dir}/$subdir/
  popd
}

%pre -f %{name}.pre
%service_add_pre %{name}.service

%preun
%service_del_preun %{name}.service

%post
%if %{with apparmor_reload}
%apparmor_reload usr.sbin.%{name}
%endif
%service_add_post %{name}.service

%postun
%service_del_postun %{name}.service

%files
%dir %{ngx_conf_dir}/
%dir %{ngx_conf_dir}/vhosts.d
%dir %{ngx_conf_dir}/conf.d
%config(noreplace) %{ngx_conf_dir}/koi-utf
%config(noreplace) %{ngx_conf_dir}/koi-win
%config(noreplace) %{ngx_conf_dir}/fastcgi_params
%config %{ngx_conf_dir}/fastcgi_params.default
%config(noreplace) %{ngx_conf_dir}/mime.types
%config %{ngx_conf_dir}/mime.types.default
%config(noreplace) %{ngx_conf_dir}/nginx.conf
%config %{ngx_conf_dir}/%{name}.conf.default
%config(noreplace) %{ngx_conf_dir}/fastcgi.conf
%config %{ngx_conf_dir}/fastcgi.conf.default
%config(noreplace) %{ngx_conf_dir}/win-utf
%config(noreplace) %{ngx_conf_dir}/scgi_params
%config %{ngx_conf_dir}/scgi_params.default
%config(noreplace) %{ngx_conf_dir}/uwsgi_params
%config %{ngx_conf_dir}/uwsgi_params.default
%{perl_vendorarch}/auto/%{name}/
%{perl_vendorarch}/%{name}.pm
%{ngx_sbin_path}
%dir %{_libdir}/%{name}/
%dir %{ngx_module_dir}/
%{ngx_module_dir}/ngx_http_perl_module.so
%{ngx_module_dir}/ngx_http_xslt_filter_module.so
%{ngx_module_dir}/ngx_mail_module.so
%{ngx_module_dir}/ngx_stream_module.so
%{_mandir}/man3/%{name}.3pm*
/srv/www/htdocs/50x.html
%{_sbindir}/rc%{name}
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{_localstatedir}/log/nginx/
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{ngx_home}/
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{ngx_tmp_http}
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{ngx_tmp_proxy}
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{ngx_tmp_fcgi}
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{ngx_tmp_scgi}
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{ngx_tmp_uwsgi}
%doc %{ngx_doc_dir}
%{_unitdir}/%{name}.service
%{_sysusersdir}/%{name}.conf
%{_datadir}/%{name}/

#LibertaCasa - additional files/directories
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{ngx_cache_dir}
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{ngx_log_dir}
%dir %attr(750,root,%{ngx_user_group}) %{ngx_snippets_dir}
%config %attr(640,root,%{ngx_user_group}) %{ngx_snippets_dir}/robots
%config(noreplace) %attr(640,root,%{ngx_user_group}) %{ngx_conf_dir}/vhosts.d/*
%dir %{_sysconfdir}/apparmor.d
%dir %{_sysconfdir}/apparmor.d/local
%config %attr(644,root,root) %{_sysconfdir}/apparmor.d/usr.sbin.%{name}
%config(noreplace) %attr(644,root,root) %{_sysconfdir}/apparmor.d/local/usr.sbin.%{name}
%if %{with modsecurity}
%dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{ngx_log_dir}/modsecurity
%dir %attr(750,root,%{ngx_user_group}) %{ngx_security_dir}
%dir %attr(750,root,%{ngx_user_group}) %{ngx_security_dir}/rules
%config %attr(640,root,%{ngx_user_group}) %{ngx_snippets_dir}/modsecurity
%config(noreplace) %attr(640,root,%{ngx_user_group}) %{ngx_security_dir}/modsecurity_includes.conf
%config(noreplace) %attr(640,root,%{ngx_user_group}) %{ngx_security_dir}/modsecurity.conf
%config(noreplace) %attr(640,root,%{ngx_user_group}) %{ngx_security_dir}/crs-setup.conf
%config %attr(640,root,%{ngx_user_group}) %{ngx_security_dir}/unicode.mapping
%config %attr(640,root,%{ngx_user_group}) %{ngx_security_dir}/rules/*
%endif
%if %{with error}
%config %attr(640,root,%{ngx_user_group}) %{ngx_snippets_dir}/error
%dir %attr(750,root,%{ngx_user_group}) %{ngx_error_dir}
%dir %attr(750,root,%{ngx_user_group}) %{ngx_error_dir}/_errors
%dir %attr(750,root,%{ngx_user_group}) %{ngx_error_dir}/_errors/images
%attr(640,root,%{ngx_user_group}) %{ngx_error_dir}/*.html
%attr(640,root,%{ngx_user_group}) %{ngx_error_dir}/_errors/main.css
%attr(640,root,%{ngx_user_group}) %{ngx_error_dir}/_errors/images/teapot.jpg
%endif

%files source
%{src_install_dir}

%changelog
openSUSE Build Service is sponsored by
Places