rpm/nginx

nginx builds with brotli, zstd, geoip2, cache_purge and ModSecurity modules, HTTP/3.

spec	package	distros	notes
nginx.spec	nginx 1.31.8	el8, el10	el8: QUIC via /opt/openssl-3.5.5 (rpm/openssl), bundled pcre-8.45 tarball; el10: system OpenSSL (NGX_QUIC_OPENSSL_API)
nginx-1.29.1.spec	nginx 1.29.1	el8	pinned older build, QUIC via /opt/quictls-3.1.5
nginx-boringssl.spec	nginx 1.25.2	el8, el10	links /home/rpm/rpmbuild/BUILD/usr/src/boringssl, which the spec never fetches or builds

All three build the package name nginx; dnf installs the highest version unless one is pinned. Tag: nginx/1.31.8-1, nginx-1.29.1/1.29.1-1, nginx-boringssl/1.25.2-1.

Changes from the legacy specs

• nginx.spec: el8 moved from 1.29.5 to el10's 1.31.8; Source1 uses %{version}.
• debuginfo path in %files built from %{version}-%{release}.%{_arch} instead of a hardcoded -.el8 (also in nginx-1.29.1 and nginx-boringssl, where it could not match on el10).
• zlib Source0 now points to the GitHub release asset (same sha256 as zlib.net, which answers scripted downloads with a bot-check page); nginx-boringssl's pcre mirror (kumisystems, gone) replaced by the SourceForge mirror nginx.spec uses.

Files to add

files/nginx/ (copied to SOURCES/nginx/): nginx.conf, nginx1.conf, nginx2.conf, proxy_params, proxy_params_proxyprotocol, nginx.service, nginx1.service, nginx2.service, snippets/gzip.conf, snippets/brotli.conf, snippets/zstd.conf.

Build-time requirements

• %prep clones ngx_http_geoip2_module, ngx_cache_purge, ngx_brotli, zstd-nginx-module and ModSecurity-nginx from GitHub (some with sudo); needs git, cmake, network.
• No BuildRequires; needs libmaxminddb, modsecurity (/usr/local/modsecurity), pcre, zstd/brotli devel and, on el8, openssl-3.5.5 / quictls installed.