packages/net/nginx, branch master

nginx: 302 the "/" path to "/cgi-bin/luci/"

2026-10-25T12:44:30Z

This change will prevent the blank "LuCI - Lua Configuration Interface" screen from being displayed for the first time when accessing luci via a url like 192.168.1.1 Signed-off-by: Tianshuai Gao [ improve spacing ] Signed-off-by: Christian Marangi

nginx-util: specify gzip_types to actually enable gzip

2026-10-25T12:38:47Z

The nginx-util package was missing gzip_types configuration, which meant gzip compression was not being properly applied to responses. This change adds the necessary gzip_types directive to ensure content is compressed. Signed-off-by: Nikita Solianik [ bump package release ] Signed-off-by: Christian Marangi

nginx: only build luajit2 if required

2026-10-25T12:36:30Z

On some systems luajit2 will not build. When compiling the nginx packages it was being pulled in as a dependency even if no nginx subpackage that requires it was selected and thus building nginx failed. This change will only pull in the dependency conditionally. Signed-off-by: Florian Wagner

nginx: update repository of maintained naxsi module

2026-10-25T12:31:48Z

Switch the naxsi-module repository to an actively maintained fork recommended by nbs-system due to the original project is officially abandoned (archived in 2023.11.08). Signed-off-by: Keiji Hata

nginx: update to 1.30.5

2026-10-04T10:27:18Z

1.30.4: - Heap buffer overflow with the map directive and regex matching (CVE-2026-42533). - Uninitialized memory access with unnamed regex captures and the slice directive or background cache update (CVE-2026-60005). - Use-after-free in ngx_http_ssi_filter_module with a crafted proxied backend response (CVE-2026-56434). 1.30.5: - Heap buffer overflow with HTTP/3 and OpenSSL 3.5.0 and earlier (CVE-2026-90439). All patches apply without changes. Changelog: https://nginx.org/en/CHANGES-1.30 Signed-off-by: Josef Schlehofer

nginx: update to 1.30.3

2026-07-06T07:56:39Z

Fixes buffer overflow vulnerability in ngx_http_proxy_v2_module & ngx_http_grpc_module (CVE-2026-42055) and buffer overread vulnerability in ngx_http_charset_module (CVE-2026-48142). Signed-off-by: Jan Klos

nginx: update to 1.30.2

2026-06-07T18:21:09Z

Large version jump from 1.26.3 to 1.30.2 (upstream stable). changelogs at https://nginx.org/en/CHANGES-1.30, https://nginx.org/en/CHANGES-1.28 .include security fixs. Signed-off-by: Seo Suchan

treewide: cleanup URLs

2026-05-08T20:28:27Z

This commit converts plain HTTP URLs to HTTPS, and updates old or outdated URLs. Signed-off-by: Yanase Yuki

treewide: fix licenses

2026-02-19T18:15:36Z

Fix licenses. Signed-off-by: Wei-Ting Yang

nginx: fix module depends on nginx

2026-02-18T09:10:35Z

Closes #28587 nginx: many module recursive dependencies The solution turns out to be pretty trivial. Replace the +nginx in the module DEPENDS. This means the modules do not 'select' nginx, but the do 'depend on' nginx. So nginx is required to install the modules. This is the same approach taken with PHP8 and #28585 for Zabbix. Signed-off-by: Daniel F. Dickinson