cd /root/oneinstack/src
wget https://nginx.org/download/nginx-1.15.5.tar.gz
wget https://www.openssl.org/source/openssl-1.1.1.tar.gz
wget http://labs.frickle.com/files/ngx_cache_purge-2.3.tar.gz
wget http://labs.frickle.com/files/ngx_slowfs_cache-1.9.tar.gz
wget http://mirrors.linuxeye.com/oneinstack/src/pcre-8.42.tar.gz
git clone https://github.com/cuber/ngx_http_google_filter_module
git clone https://github.com/yaoweibin/ngx_http_substitutions_filter_module
tar zxf nginx-1.15.5.tar.gz
tar zxf openssl-1.1.1.tar.gz
tar zxf ngx_cache_purge-2.3.tar.gz
tar zxf ngx_slowfs_cache-1.9.tar.gz
tar zxf pcre-8.42.tar.gz
pushd nginx-1.15.5
curl https://raw.githubusercontent.com/kn007/patch/43f2d869b209756b442cfbfa861d653d993f16fe/nginx.patch | patch -p1
popd
pushd nginx-1.15.5
curl https://raw.githubusercontent.com/hakasenyang/openssl-patch/master/nginx_strict-sni.patch | patch -p1
popd
pushd openssl-1.1.1
curl https://raw.githubusercontent.com/hakasenyang/openssl-patch/master/openssl-equal-1.1.1_ciphers.patch | patch -p1
popd
cd nginx-1.15.5
#编译
./configure --prefix=/usr/local/nginx --user=www --group=www --with-http_stub_status_module --with-http_v2_module --with-http_v2_hpack_enc --with-http_ssl_module --with-http_gzip_static_module --with-http_realip_module --with-http_flv_module --with-http_mp4_module --with-openssl=../openssl-1.1.1 --with-openssl-opt=enable-tls1_3 --with-pcre=../pcre-8.42 --with-pcre-jit --with-ld-opt=-ljemalloc --add-module=../ngx_http_substitutions_filter_module --add-module=../ngx_http_google_filter_module --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_slowfs_cache-1.9
make
#备份现有nginx
mv /usr/local/nginx/sbin/nginx{,_`date +%m%d`}
#更新nginx
cp objs/nginx /usr/local/nginx/sbin/
#检查nginx语法
nginx -t
#重载Nginx
service nginx restart
