Beta Branch More prep for pcre2 Nginx support & related updates in 123.09beta01

More prep for pcre2 Nginx support & related updates in 123.09beta01

- More prep work for pcre2 Nginx support for Nginx 1.21.5+ outlined at https://community.centminmod.com/threads/prep-for-pcre2-nginx-support-in-123-09beta01.22319/
- Major revised work for following routines to change the location they're installed at from PREFIX = /usr/local to PREFIX = /usr/local/nginx-dep for GeoIP2 Lite Nginx module and it's libmaxmind library paths, custom libatomic_ops RPM, and Modsecurity routine which relies on libmaxmind library, ngx_brotli and nginx lua and luajit installs as well install separate pcre v8.45 for legacy support in new PREFIX = /usr/local/nginx-dep location. These changes will align with pcre2 v10.x installed PREFIX = /usr/local/nginx-dep path.
- Prep for Nginx compile support using Mold linker GitHub - rui314/mold: mold: A Modern Linker as an alternative to GNU Gold linker
- Add dropbox_send function to optionally allow sending of nginx_upgrade logs and pcre2 nginx upgrade logs to users Dropbox account either via detected Rclone install or via dbsend shell script detection. Disabled by default, unless persistent config file set variable DROPBOX_SEND='y' exists and addons/rclone.sh installed rclone or dbsend shell script is detected
- If PCRE2 Nginx is enabled and Nginx Lua or Modsecurity Nginx module is also enabled, auto disable PCRE2 and switch back to PCRE due to incompatibility right now with PCRE2 and Nginx Lua or Modsecurity Nginx modules
- Update OpenSSL routine to optionally support only running if OpenSSL version installed differs from OpenSSL version defined or if OPENSSL_FORCECOMPILE='y' is set in persistent config file. Should speed up Nginx compilation routine.Not enabled by default
- Prep for OpenSSL 3.0.x support in Nginx & Nginx kTLS support when OpenSSL 3.0 + 5.2+ Linux Kernel detected
- Update ccache routine for 4.4+ redis support

---

Continue reading...

123.09beta01 branch

• Branch: GitHub - centminmod/centminmod at 123.09beta01
• Commit History: Commits · centminmod/centminmod

 

With latest Nginx PCRE2 optional support update, to switch to PCRE2 support for Nginx 1.21.5+, you need to update your persistent config file at /etc/centminmod/custom_config.inc (if it doesn't exist create it) and add the variable to enable Nginx PCRE2 support.

Code (Text):

NGINX_PCRE_TWO='y'

Then run centmin.sh menu option 4 and update/recompile to Nginx version 1.21.5 or higher which support PCRE2.

 

Yes Centmin Mod Nginx compile routines automatically detect the capabilities of your server's CPU model and adjusts the options and parameters as needed.

Though enable-ec_nistp_64_gcc_128 is enabled to if OpenSSL 1.1.1 is detected, so will double check the routines. Did you by any change change the default setting for NGXMODULE_ALTORDER='y' in persistent config file to NGXMODULE_ALTORDER='n' ?

 

For details see https://community.centminmod.com/threads/sending-nginx-upgrade-logs-to-dropbox-via-rclone.22402/