passenger 4.0.59 → 4.0.60

data/packaging/debian/debian_specs/nginx/nginx-common.NEWS

@@ -0,0 +1,135 @@
+nginx-common (1.6.2-5) unstable; urgency=medium
+
+  We have disabled SSLv3 in nginx.conf for security reasons (ref: POODLE),
+  don't forget to re-enable it if your site depends on it.
+
+  In this release we also include a summary of important changes since wheezy
+  at /usr/share/doc/nginx-common/README.Debian.
+
+ -- Christos Trochalakis <yatiohi@ideopolis.gr>  Sun, 02 Nov 2014 09:10:09 +0200
+
+nginx-common (1.6.2-3) unstable; urgency=medium
+
+  Starting with this release, we changed the default document root from
+  /var/www to /var/www/html, so that sensitive files from other virtual hosts
+  wich are typically put into some directory below /var/www are not exposed by
+  the default virtual host.
+
+ -- Christos Trochalakis <yatiohi@ideopolis.gr>  Tue, 30 Sep 2014 17:34:58 +0300
+
+nginx-common (1.6.1-2) unstable; urgency=medium
+
+  As of nginx-1.6.1-2 we have synced all configuration files with upstream and
+  we plan to keep them in sync from now on.
+
+  Unfortunately that might break existing configuration for some users. Please
+  check the matrix below for more information:
+
+  File            Changes
+  -----------------------
+  koi-win         whitespace
+  koi-utf         whitespace
+  mime-types      whitespace, changed js/rss mime type,
+                  minor other changes & additions
+  scgi_params     whitespace, added HTTPS
+  uwsgi_params    whitespace, added HTTPS, removed UWSGI_SCHEME
+  fastcgi_params  whitespace, removed SCRIPT_FILENAME
+  fastcgi.conf    new upstream configuration file
+
+  Fastcgi configuration issues
+  ============================
+
+  nginx shipped a modified `fastcgi_params`, which declared `SCRIPT_FILENAME`
+  fastcgi_param. This line has now been removed. From now on we are also
+  shipping fastcgi.conf from the upstream repository, which includes a sane
+  `SCRIPT_FILENAME` parameter value.
+
+  So, if you are using fastcgi_params, you can try switching to fastcgi.conf
+  or manually set the relevant params.
+
+  You might also want to read the documentation section before proceeding.
+
+  http://nginx.org/en/docs/http/ngx_http_fastcgi_module.html
+  section: $fastcgi_script_name variable.
+
+ -- Christos Trochalakis <yatiohi@ideopolis.gr>  Thu, 28 Aug 2014 14:23:42 +0300
+
+nginx-common (1.4.4-2) unstable; urgency=low
+
+  Per CVE-2013-0337 (bug #701112), we are changing /var/log/nginx permissions
+  to root:adm 750. If you have manipulated these permissions in any way, you
+  can add a dpkg-statoverride entry and the directory will not be touched.
+  You also have to manually set the permissions once, as dpkg doesn't do that
+  automatically for directories.
+
+  e.g.
+    chown root:adm /var/log/nginx
+    chmod 0755 /var/log/nginx
+    dpkg-statoverride --add root adm 0755 /var/log/nginx
+
+ -- Michael Lustfield <michael@lustfield.net>  Sun, 24 Nov 2013 15:59:52 -0600
+
+nginx (1.4.1-2) unstable; urgency=medium
+
+  Started with nginx 1.4.1-2 upload, nginx-naxsi-ui switched backend from
+  MySQL to SQLite.
+
+  This was mostly caused by the future removal of MySQL support in naxsi-ui.
+  Thus, the nginx maintainers decided to switch from MySQL to SQLite.
+
+  All data contained in the MySQL database is not affected by this switch but
+  you need to start with a clean SQLite database to ensure nginx-naxsi-ui
+  reliability.
+
+ -- Cyril Lavier <cyril.lavier@davromaniak.eu>  Wed,  5 Jun 2013 09:45:03 +0200
+
+nginx (0.8.53-1) unstable; urgency=low
+
+  As stated by upstream, the 0.7.x branch is consedered legacy and 0.8.x will
+  be the new stable branch. For this reason, the nginx maintainers decided to
+  upload 0.8.53 to unstable.
+
+ -- Kartik Mistry <kartik@debian.org>  Fri, 26 Nov 2010 19:42:09 +0530
+
+nginx (0.7.59-1) unstable; urgency=low
+
+  As stated by upstream, the 0.6.x branch is consedered legacy and 0.7.x will
+  be the new stable branch. For this reason, the nginx maintainers decided to
+  upload 0.7.59 to unstable.
+
+  Should you get the following error while starting nginx:
+
+    could not build the server_names_hash, you should increase
+    server_names_hash_bucket_size: 32
+
+  Please add the following parameter to your nginx.conf:
+
+    server_names_hash_bucket_size 100;
+
+  Where 100 is the size of your server names hash bucket. For more information
+  about this option, please read the following resources:
+
+    http://wiki.nginx.org/NginxHttpCoreModule#server_names_hash_bucket_size
+    http://thread.gmane.org/gmane.comp.web.nginx.english/820/focus=821
+    http://thread.gmane.org/gmane.comp.web.nginx.english/985/focus=989
+
+ -- Fabio Tranchitella <kobold@debian.org>  Sun, 31 May 2009 18:30:10 +0200
+
+nginx (0.6.30-2) unstable; urgency=low
+
+  As of May 4th., nginx 0.5.x branch is considered legacy and 0.6.x will
+  be the new stable branch. The announcement was made by Igor Sysoev when
+  releasing the last 0.5.x version, nginx 0.5.36.
+
+  Debian, the universal operating system, has provided binary packages for
+  both 0.5 and 0.6 branches in unstable and experimental, and will now offer
+  only 0.6 packages in the unstable distribution, starting with the
+  0.6.30-1 package.
+
+  In the future, Debian will also provide experimental packages for the
+  next testing branch of nginx, at the moment upstream announces it.
+
+  Should you have any problem with nginx in Debian, please file a bug in
+  the Debian Bug Tracking System.
+
+ -- Fabio Tranchitella <kobold@debian.org>  Mon, 12 May 2008 14:24:53 +0200

data/packaging/debian/debian_specs/nginx/nginx-common.README.Debian

@@ -0,0 +1,45 @@
+Noteworthy Changes Wheezy => Jessie
+===================================
+
+* Disabled SSLv3 by default
+
+  After POODLE we followed suit and disabled SSLv3 by default.
+
+* /var/log/nginx permissions
+
+  /var/log/nginx/ is now not readable by default (www-data:adm 750),
+  If you depend on that you can add a manual override with dpkg-statoverride.
+
+* New upgrade & rotate initscript commands
+
+  You can now upgrade the nginx binary on the fly with /etc/init.d/nginx upgrade
+  (Read more on http://nginx.org/en/docs/control.html#upgrade)
+
+* Synced configuration files are with upstream
+
+  Unfortunately that might break existing configuration for some users, especially
+  fastcgi scripts. /usr/share/doc/nginx-common/NEWS.Debian.gz contains some
+  more information about the changes made.
+
+* Changed document root to /var/www/html
+
+  The default document root has now changed to /var/www/html/.
+
+* Added a snippets directory
+
+  A /etc/nginx/snippets has been added, it contains common configuration
+  stangas. For now we ship a snakeoil.conf (self-signed ssl) and a simple
+  fastcgi-php.conf.
+
+* Switched to graceful stop
+
+  Both systemd and the initscript's stop function try to graceful stop
+  nginx (SIGQUIT) before stopping it fast (SIGTERM). That allows nginx to
+  serve connected clients before shutting down.
+
+* Dropped nginx-naxsi
+
+  Packaging naxsi was not trivial and, unfortunately, none of the
+  maintainers uses it. That's the reason nginx-naxsi was not in a good
+  shape and we are not feeling comfortable to release and support it.
+

data/packaging/debian/debian_specs/nginx/nginx-common.dirs.erb

@@ -0,0 +1,32 @@
+<%
+case distribution_class
+when :ubuntu
+  if is_distribution?("<= quantal")
+    default_document_root = "/usr/share/nginx/www"
+  elsif is_distribution?("<= utopic")
+    default_document_root = "/usr/share/nginx/html"
+  else
+    default_document_root = "/var/www/html"
+  end
+when :debian
+  if is_distribution?("<= wheezy")
+    default_document_root = "/usr/share/nginx/www"
+  else
+    default_document_root = "/var/www/html"
+  end
+else
+  raise "Unsupported distribution class"
+end
+-%>
+etc/nginx
+etc/nginx/sites-available
+etc/nginx/sites-enabled
+etc/nginx/conf.d
+etc/ufw/applications.d
+<% if is_distribution?("<= saucy") || is_distribution?("<= wheezy") -%>
+etc/logrotate.d
+<% end -%>
+usr/share/nginx
+var/log/nginx
+var/lib/nginx
+<%= default_document_root %>

data/packaging/debian/debian_specs/nginx/nginx-common.install

@@ -0,0 +1,3 @@
+debian/conf/* etc/nginx
+debian/ufw/nginx etc/ufw/applications.d
+debian/index.html usr/share/nginx/html/

data/packaging/debian/debian_specs/nginx/nginx-common.lintian-overrides

@@ -0,0 +1,2 @@
+# /var/www/html is the default document root
+nginx-common: dir-or-file-in-var-www var/www/html/

data/packaging/debian/debian_specs/nginx/nginx-common.manpages

@@ -0,0 +1 @@
+debian/nginx.1

data/packaging/debian/debian_specs/nginx/nginx-common.nginx.default

@@ -0,0 +1,10 @@
+# Note: You may want to look at the following page before setting the ULIMIT.
+#  http://wiki.nginx.org/CoreModule#worker_rlimit_nofile
+# Set the ulimit variable if you need defaults to change.
+#  Example: ULIMIT="-n 4096"
+#ULIMIT="-n 4096"
+
+# Define the stop schedule for nginx
+# see the start-stop-daemon --retry documentation for more information
+#
+#STOP_SCHEDULE="QUIT/5/TERM/5/KILL/5"

data/packaging/debian/debian_specs/nginx/nginx-common.nginx.init.erb

@@ -0,0 +1,214 @@
+<%
+require File.absolute_path(File.dirname(__FILE__)) + '/helpers'
+-%>
+#!/bin/sh
+
+### BEGIN INIT INFO
+# Provides:   nginx
+# Required-Start:    $local_fs $remote_fs $network $syslog $named
+# Required-Stop:     $local_fs $remote_fs $network $syslog $named
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: starts the nginx web server
+# Description:       starts nginx using start-stop-daemon
+### END INIT INFO
+
+PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+DAEMON=/usr/sbin/nginx
+NAME=nginx
+DESC=nginx
+
+# Include nginx defaults if available
+if [ -r /etc/default/nginx ]; then
+    . /etc/default/nginx
+fi
+
+STOP_SCHEDULE="${STOP_SCHEDULE:-QUIT/5/TERM/5/KILL/5}"
+
+test -x $DAEMON || exit 0
+
+. /lib/init/vars.sh
+. /lib/lsb/init-functions
+
+# Try to extract nginx pidfile
+PID=$(cat /etc/nginx/nginx.conf | grep -Ev '^\s*#' | awk 'BEGIN { RS="[;{}]" } { if ($1 == "pid") print $2 }' | head -n1)
+if [ -z "$PID" ]
+then
+    PID=<%= localstatedir %>/nginx.pid
+fi
+
+# Check if the ULIMIT is set in /etc/default/nginx
+if [ -n "$ULIMIT" ]; then
+    # Set the ulimits
+    ulimit $ULIMIT
+fi
+
+#
+# Function that starts the daemon/service
+#
+do_start()
+{
+    # Return
+    #   0 if daemon has been started
+    #   1 if daemon was already running
+    #   2 if daemon could not be started
+    start-stop-daemon --start --quiet --pidfile $PID --exec $DAEMON --test > /dev/null \
+        || return 1
+    start-stop-daemon --start --quiet --pidfile $PID --exec $DAEMON -- \
+        $DAEMON_OPTS 2>/dev/null \
+        || return 2
+}
+
+test_nginx_config() {
+    $DAEMON -t $DAEMON_OPTS >/dev/null 2>&1
+}
+
+#
+# Function that stops the daemon/service
+#
+do_stop()
+{
+    # Return
+    #   0 if daemon has been stopped
+    #   1 if daemon was already stopped
+    #   2 if daemon could not be stopped
+    #   other if a failure occurred
+    start-stop-daemon --stop --quiet --retry=$STOP_SCHEDULE --pidfile $PID --name $NAME
+    RETVAL="$?"
+
+    sleep 1
+    return "$RETVAL"
+}
+
+#
+# Function that sends a SIGHUP to the daemon/service
+#
+do_reload() {
+    start-stop-daemon --stop --signal HUP --quiet --pidfile $PID --name $NAME
+    return 0
+}
+
+#
+# Rotate log files
+#
+do_rotate() {
+    start-stop-daemon --stop --signal USR1 --quiet --pidfile $PID --name $NAME
+    return 0
+}
+
+#
+# Online upgrade nginx executable
+#
+# "Upgrading Executable on the Fly"
+# http://nginx.org/en/docs/control.html
+#
+do_upgrade() {
+    # Return
+    #   0 if nginx has been successfully upgraded
+    #   1 if nginx is not running
+    #   2 if the pid files were not created on time
+    #   3 if the old master could not be killed
+    if start-stop-daemon --stop --signal USR2 --quiet --pidfile $PID --name $NAME; then
+        # Wait for both old and new master to write their pid file
+        while [ ! -s "${PID}.oldbin" ] || [ ! -s "${PID}" ]; do
+            cnt=`expr $cnt + 1`
+            if [ $cnt -gt 10 ]; then
+                return 2
+            fi
+            sleep 1
+        done
+        # Everything is ready, gracefully stop the old master
+        if start-stop-daemon --stop --signal QUIT --quiet --pidfile "${PID}.oldbin" --name $NAME; then
+            return 0
+        else
+            return 3
+        fi
+    else
+        return 1
+    fi
+}
+
+case "$1" in
+    start)
+        [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
+        do_start
+        case "$?" in
+            0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+            2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+        esac
+        ;;
+    stop)
+        [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
+        do_stop
+        case "$?" in
+            0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+            2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+        esac
+        ;;
+    restart)
+        log_daemon_msg "Restarting $DESC" "$NAME"
+
+        # Check configuration before stopping nginx
+        if ! test_nginx_config; then
+            log_end_msg 1 # Configuration error
+            exit 0
+        fi
+
+        do_stop
+        case "$?" in
+            0|1)
+                do_start
+                case "$?" in
+                    0) log_end_msg 0 ;;
+                    1) log_end_msg 1 ;; # Old process is still running
+                    *) log_end_msg 1 ;; # Failed to start
+                esac
+                ;;
+            *)
+                # Failed to stop
+                log_end_msg 1
+                ;;
+        esac
+        ;;
+    reload|force-reload)
+        log_daemon_msg "Reloading $DESC configuration" "$NAME"
+
+        # Check configuration before reload nginx
+        #
+        # This is not entirely correct since the on-disk nginx binary
+        # may differ from the in-memory one, but that's not common.
+        # We prefer to check the configuration and return an error
+        # to the administrator.
+        if ! test_nginx_config; then
+            log_end_msg 1 # Configuration error
+            exit 0
+        fi
+
+        do_reload
+        log_end_msg $?
+        ;;
+    configtest|testconfig)
+        log_daemon_msg "Testing $DESC configuration"
+        test_nginx_config
+        log_end_msg $?
+        ;;
+    status)
+        status_of_proc -p $PID "$DAEMON" "$NAME" && exit 0 || exit $?
+        ;;
+    upgrade)
+        log_daemon_msg "Upgrading binary" "$NAME"
+        do_upgrade
+        log_end_msg 0
+        ;;
+    rotate)
+        log_daemon_msg "Re-opening $DESC log files" "$NAME"
+        do_rotate
+        log_end_msg $?
+        ;;
+    *)
+        echo "Usage: $NAME {start|stop|restart|reload|force-reload|status|configtest|rotate|upgrade}" >&2
+        exit 3
+        ;;
+esac
+
+: