[Pkg-nginx-maintainers] Change Proposals for NGINX

Thomas Ward teward at thomas-ward.net
Mon Jun 17 17:53:33 BST 2024


I have a few things I'd like to propose for ease of use, etc. for users.

We have a default config file but it includes way more than just 
"Defaults" and serves as an "example" site.

I'd like to make some changes.


1) Move a lot of the 'default' options to snippets.

   - Namely, PHP and .ht* Deny to config snippets so they can be used 
elsewhere.

   - Provide "default" SSL configuration options based on Mozilla's 
recommendations (intermediate and modern) as snippets. This does NOT 
include SSL cert/key options, only the basic SSL options like ciphers, 
tickets, etc.

   - This is https://salsa.debian.org/nginx-team/nginx/-/issues/11 and 
in my fork being worked on now.

2) I'd like to split 'default' and 'example.com' completely, and provide 
default as the default "functioning" site, but then "example.com" as an 
example config else in the system (as in the default sites-available 
file we also include a commented out example.com site config).

   - I haven't started this yet, but it also would integrate point 1 as 
well.


Are there any objections to this proposal?



Thomas





More information about the Pkg-nginx-maintainers mailing list