This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. {{tag>nginx guide pagespeed compile hosting libressl headers}} {{howhard>4}} ====== NGINX, PageSpeed, Brotli ====== This guide assumes you are switched to su - . Please note that during the ./configure steps you need to check for missing libraries, this guide assumes you are using the eSG provided installation image. ===== Goal ===== Compile nginx with most modules, including support for http2 and pagespeed. ===== Steps ===== ==== EXPORTS used to set versions ==== You can change the values here to change compiled version. <sxh>NGINX_VERSION=1.23.1 PS_NGX_EXTRA_FLAGS="--with-ld-opt=-static-libstdc++" HEADERS_VERSION=0.34 NPS_VERSION=latest-stable LIBRESSL_VERSION=3.5.3 OPENSSL_VERSION=3.0.5</sxh> ==== Building Pre requisites ==== <sxh> cd ~ mkdir buildnginx cd ~/buildnginx useradd nginx </sxh> ===== Library Prerequisites ===== ==== Centos 7 ==== <sxh>yum install -y epel-release yum -y groupinstall 'Development Tools' yum -y install gc gcc gcc-c++ pcre-devel zlib-devel make wget openssl-devel libxml2-devel libxslt-devel gd-devel perl-ExtUtils-Embed GeoIP-devel gperftools gperftools-devel libatomic_ops-devel perl-ExtUtils-Embed perl-Digest-SHA1.x86_64 perl-Digest-MD5.x86_64 openssl-devel.x86_64 openssl.x86_64 openssl-libs.x86_64 libuuid-devel</sxh> ==== Centos 8 ==== <sxh>yum install -y epel-release yum -y groupinstall 'Development Tools' yum config-manager --set-enabled PowerTools yum -y install gc gcc gcc-c++ pcre-devel zlib-devel make wget openssl-devel libxml2-devel libxslt-devel gd-devel perl-ExtUtils-Embed GeoIP-devel gperftools gperftools-devel libatomic_ops-devel perl-ExtUtils-Embed perl-Digest-MD5.x86_64 openssl-devel.x86_64 openssl.x86_64 openssl-libs.x86_64 libuuid-devel</sxh> ==== Fedora 32-36 ==== <sxh>dnf groupinstall 'Development Tools' dnf install gc gcc gcc-c++ pcre-devel zlib-devel make wget openssl-devel libxml2-devel libxslt-devel gd-devel perl-ExtUtils-Embed GeoIP-devel gperftools gperftools-devel libatomic_ops-devel perl-ExtUtils-Embed perl-Digest-MD5.x86_64 openssl-devel.x86_64 openssl.x86_64 openssl-libs.x86_64 libuuid-devel perl</sxh> ==== Fetch nginx ==== <sxh>wget http://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz tar zxfv nginx-${NGINX_VERSION}.tar.gz</sxh> ==== Fetch libressl ==== <sxh>wget http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${LIBRESSL_VERSION}.tar.gz tar zxfv libressl-${LIBRESSL_VERSION}.tar.gz cd libressl-${LIBRESSL_VERSION} cd ~/buildnginx</sxh> ==== Fetch openssl ==== Optionally you can use openssl instead of libressl. <sxh>wget https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz tar zxfv openssl-${OPENSSL_VERSION}.tar.gz</sxh> ==== Fetch Headers_more ==== <sxh>wget https://github.com/openresty/headers-more-nginx-module/archive/v${HEADERS_VERSION}.tar.gz -O headers_more-${HEADERS_VERSION}.tar.gz tar zxfv headers_more-${HEADERS_VERSION}.tar.gz</sxh> ==== Fetch PageSpeed ==== <sxh>wget https://github.com/pagespeed/ngx_pagespeed/archive/${NPS_VERSION}.tar.gz -O pagespeed-${NPS_VERSION}.tar.gz tar zxfv pagespeed-${NPS_VERSION}.tar.gz cd incubator-pagespeed-ngx-${NPS_VERSION}</sxh> ==== Fetch PSOL ==== Check here for latest release: https://modpagespeed.com/doc/release_notes In order to get the version of PSOL build continue with the steps after this one, while configuring nginx you will get an error message providing the version required. In this example the latest-stable is 1.13.35.2. <sxh>wget https://dist.apache.org/repos/dist/release/incubator/pagespeed/1.14.36.1/x64/psol-1.14.36.1-apache-incubating-x64.tar.gz tar zxfv psol-1.14.36.1-apache-incubating-x64.tar.gz </sxh> ==== Fetch Brotli ==== <sxh>cd ~/buildnginx git clone https://github.com/google/ngx_brotli.git cd ngx_brotli git submodule update --init </sxh> ==== Fetch vts ==== <sxh>cd ~/buildnginx git clone https://github.com/vozlt/nginx-module-vts.git </sxh> ==== Configure NGINX ==== <sxh>cd ~/buildnginx cd nginx-${NGINX_VERSION}</sxh> Choose between the following: == libreSSL == <sxh>./configure --user=nginx --group=nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --with-select_module --with-poll_module --with-threads --with-file-aio --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module --with-http_xslt_module=dynamic --with-http_image_filter_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-http_geoip_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_auth_request_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_perl_module --with-http_perl_module=dynamic --with-mail --with-mail_ssl_module --with-mail=dynamic --with-stream --with-stream=dynamic --with-stream_ssl_module --with-stream_geoip_module --with-stream_geoip_module=dynamic --with-google_perftools_module --with-pcre --with-libatomic --with-http_v2_module --add-module=../incubator-pagespeed-ngx-${NPS_VERSION} ${PS_NGX_EXTRA_FLAGS} ${PS_NGX_EXTRA_FLAGS} --with-openssl=../libressl-${LIBRESSL_VERSION}/ --add-module=../headers-more-nginx-module-${HEADERS_VERSION}/ --add-module=../ngx_brotli --add-module=../nginx-module-vts</sxh> == openSSL == <sxh>./configure --user=nginx --group=nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --with-select_module --with-poll_module --with-threads --with-file-aio --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module --with-http_xslt_module=dynamic --with-http_image_filter_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-http_geoip_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_auth_request_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_perl_module --with-http_perl_module=dynamic --with-mail --with-mail_ssl_module --with-mail=dynamic --with-stream --with-stream=dynamic --with-stream_ssl_module --with-stream_geoip_module --with-stream_geoip_module=dynamic --with-google_perftools_module --with-pcre --with-libatomic --with-http_v2_module --add-module=../incubator-pagespeed-ngx-${NPS_VERSION} ${PS_NGX_EXTRA_FLAGS} ${PS_NGX_EXTRA_FLAGS} --with-openssl=../openssl-${OPENSSL_VERSION}/ --add-module=../headers-more-nginx-module-${HEADERS_VERSION}/ --add-dynamic-module=../ngx_brotli </sxh> ==== Build NGINX ==== <sxh>make</sxh> ==== Install NGINX ==== <sxh>make install</sxh> ===== Setup Steps ===== ==== Setup the systemd service ===== [[systems:nginx.service|Create the systemd service]] ==== Setup the pid directory creation ===== <sxh bash>echo "d /var/run/nginx 755 root root" > /usr/lib/tmpfiles.d/nginx.conf</sxh> ==== Edit nginx.conf ==== <sxh bash> pid /var/run/nginx/nginx.pid; user nginx nginx; </sxh> ==== Create temp folder on boot ==== Used for the pid file vim /usr/lib/tmpfiles.d/nginx.conf <sxh>d /var/run/nginx 755 root root</sxh> ==== Setup Firewalld ===== [[systems:firewalld#http/s|Firewalld]] This page has been accessed {{counter|today}} times Today, {{counter|yesterday}} times Yesterday and {{counter|total}} times Since 2020/06/08.