ARM64, ARMV7, AMD64 全平台支持添加

nginx 内置包含的模块

# nginx -V
nginx version: nginx/1.20.2
built by gcc 10.2.1 20210110 (Debian 10.2.1-6) 
built with OpenSSL 1.1.1k  25 Mar 2021
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-g -O2 -ffile-prefix-map=/data/builder/debuild/nginx-1.20.2/debian/debuild-base/nginx-1.20.2=. -fstack-protector-strong -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -Wl,--as-needed -pie' --add-module=/tmp/ngx_cache_purge --add-module=/tmp/ngx_brotli --add-module=/tmp/ngx_waf

waf on; # 是否启用模块
waf_rule_path /www/server/nginx/src/ngx_waf/assets/rules/; # 模块规则
waf_mode STD !CC; # 启用普通模式并关闭CC防护
waf_cache capacity=50; # 缓存配置
waf_under_attack on uri=/under-attack.html; # 配置5秒盾

把测试用的5秒盾html文件复制到你的站点的根目录下

wget https://raw.githubusercontent.com/ADD-SP/ngx_waf/master/assets/under-attack.html -o /www/wwwroot/rn.vsvs.xyz

在nginx配置文件中增加

    brotli on;
    brotli_comp_level 6; 
    brotli_static on;
    brotli_types
        text/css
        text/plain
        text/javascript
        application/javascript
        application/json
        application/x-javascript
        application/xml
        application/xml+rss
        application/xhtml+xml
        application/x-font-ttf
        application/x-font-opentype
        application/vnd.ms-fontobject
        image/svg+xml
        image/x-icon
        application/rss+xml
        application/atom_xml
        image/jpeg
        image/gif
        image/png
        image/icon
        image/bmp
        image/jpg;

在 docker compose 中映射ca文件

    volumes:
      - ${USERDIR}/nginx/certs/ca.crt:/usr/local/share/ca-certificates/ca.crt

然后执行 docker exec -it [docker name] update-ca-certificates --fresh

例子： docker exec -it [docker name] htpasswd -c /[path to nginx]/conf.d/cron2.htpasswd [user name]

        # To add basic authentication to v2 use auth_basic setting.
        #这个是提示信息
        auth_basic "Please input password";
        #存放密码文件的路径
        auth_basic_user_file /etc/nginx/conf.d/cron.htpasswd;

  nginxweb:
    image: bloodstar/nginx-purge
    container_name: "nginxweb"
    hostname: nginxweb
    ports:
      - "80:80"
      - "443:443"
    restart: always
    volumes:
      # ying she zhu ji wang zhan mu lu
      - ${USERDIR}/nginx/conf.d:/etc/nginx/conf.d:ro
      - ${USERDIR}/nginxproxy/certs:/etc/nginx/certs:ro
      - ${USERDIR}/nginx/nginx.conf:/etc/nginx/nginx.conf:ro

http {
    proxy_cache_path  /tmp/cache  keys_zone=tmpcache:10m;

    server {
        location / {
            proxy_pass         http://127.0.0.1:8000;
            proxy_cache        tmpcache;
            proxy_cache_key    $uri$is_args$args;
            proxy_cache_purge  PURGE from 127.0.0.1;
        }
    }
}

http {
    proxy_cache_path  /tmp/cache  keys_zone=tmpcache:10m;

    server {
        location / {
            proxy_pass         http://127.0.0.1:8000;
            proxy_cache        tmpcache;
            proxy_cache_key    $uri$is_args$args;
        }

        location ~ /purge(/.*) {
            allow              127.0.0.1;
            deny               all;
            proxy_cache_purge  tmpcache $1$is_args$args;
        }
    }
}

ngx_cache_purge is nginx module which adds ability to purge content from FastCGI, proxy, SCGI and uWSGI caches.

Work on the original patch was fully funded by yo.se.

This module is production-ready.

• syntax: fastcgi_cache_purge on|off|<method> [from all|<ip> [.. <ip>]]
• default: none
• context: http, server, location

Allow purging of selected pages from FastCGI's cache.

• syntax: proxy_cache_purge on|off|<method> [from all|<ip> [.. <ip>]]
• default: none
• context: http, server, location

Allow purging of selected pages from proxy's cache.

• syntax: scgi_cache_purge on|off|<method> [from all|<ip> [.. <ip>]]
• default: none
• context: http, server, location

Allow purging of selected pages from SCGI's cache.

• syntax: uwsgi_cache_purge on|off|<method> [from all|<ip> [.. <ip>]]
• default: none
• context: http, server, location

Allow purging of selected pages from uWSGI's cache.

• syntax: fastcgi_cache_purge zone_name key
• default: none
• context: location

Sets area and key used for purging selected pages from FastCGI's cache.

• syntax: proxy_cache_purge zone_name key
• default: none
• context: location

Sets area and key used for purging selected pages from proxy's cache.

• syntax: scgi_cache_purge zone_name key
• default: none
• context: location

Sets area and key used for purging selected pages from SCGI's cache.

• syntax: uwsgi_cache_purge zone_name key
• default: none
• context: location

Sets area and key used for purging selected pages from uWSGI's cache.

ngx_cache_purge comes with complete test suite based on Test::Nginx.

You can test it by running:

$ prove

This image is based on the official nginx:mainline (see on Dockehub) and recompiled with the same configure options from vanilla nginx sources with addition of --add-module=ngx-cache-purge.

The fork of the original FRiCLE's module is used, which...

• is compatible with modern nginx
• supports purging by partial keys (* at the end) (see release notes)