nginx: Add reverse http(s) proxy for users

apt/preferences.d/nginx

@@ -0,0 +1,4 @@
+# > v1.11.5 (jessie) is required for ngx_stream_ssl_preread_module
+Package: nginx
+Pin: origin nginx.org
+Pin-Priority: 990

apt/sources.list.d/nginx.list

@@ -0,0 +1,2 @@
+deb http://nginx.org/packages/debian/ jessie nginx
+deb-src http://nginx.org/packages/debian/ jessie nginx

default/nginx

@@ -0,0 +1,5 @@
+# Defaults for nginx initscript
+# sourced by /etc/init.d/nginx
+
+# Additional options that are passed to nginx
+DAEMON_ARGS=""

default/nginx-debug

@@ -0,0 +1,8 @@
+# Defaults for nginx initscript
+# sourced by /etc/init.d/nginx-debug
+NAME="nginx-debug"
+DESC="nginx-debug"
+DAEMON="/usr/sbin/nginx-debug"
+
+# Additional options that are passed to nginx
+DAEMON_OPTS=""

group

@@ -64,3 +64,4 @@ kvm:x:124:
 unbound:x:125:
 debian-tor:x:127:
 ntpd:x:126:
+nginx:x:128:

init.d/nginx

@@ -0,0 +1,177 @@
+#!/bin/sh
+### BEGIN INIT INFO
+# Provides:          nginx
+# Required-Start:    $network $remote_fs $local_fs 
+# Required-Stop:     $network $remote_fs $local_fs
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Stop/start nginx
+### END INIT INFO
+
+# Author: Sergey Budnevitch <[email protected]>
+
+PATH=/sbin:/usr/sbin:/bin:/usr/bin
+
+if [ -L $0 ]; then
+    SCRIPTNAME=`/bin/readlink -f $0`
+else
+    SCRIPTNAME=$0
+fi
+
+sysconfig=`/usr/bin/basename $SCRIPTNAME`
+
+[ -r /etc/default/$sysconfig ] && . /etc/default/$sysconfig
+
+DESC=${DESC:-nginx}
+NAME=${NAME:-nginx}
+CONFFILE=${CONFFILE:-/etc/nginx/nginx.conf}
+DAEMON=${DAEMON:-/usr/sbin/nginx}
+PIDFILE=${PIDFILE:-/var/run/nginx.pid}
+SLEEPSEC=${SLEEPSEC:-1}
+UPGRADEWAITLOOPS=${UPGRADEWAITLOOPS:-5}
+CHECKSLEEP=${CHECKSLEEP:-3}
+
+[ -x $DAEMON ] || exit 0
+
+DAEMON_ARGS="-c $CONFFILE $DAEMON_ARGS"
+
+. /lib/init/vars.sh
+
+. /lib/lsb/init-functions
+
+do_start()
+{
+    start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \
+        $DAEMON_ARGS
+    RETVAL="$?"
+    return "$RETVAL"
+}
+
+do_stop()
+{
+    # Return
+    #   0 if daemon has been stopped
+    #   1 if daemon was already stopped
+    #   2 if daemon could not be stopped
+    #   other if a failure occurred
+    start-stop-daemon --stop --quiet --oknodo --retry=TERM/30/KILL/5 --pidfile $PIDFILE
+    RETVAL="$?"
+    rm -f $PIDFILE
+    return "$RETVAL"
+}
+
+do_reload() {
+    #
+    start-stop-daemon --stop --signal HUP --quiet --pidfile $PIDFILE
+    RETVAL="$?"
+    return "$RETVAL"
+}
+
+do_configtest() {
+    if [ "$#" -ne 0 ]; then
+        case "$1" in
+            -q)
+                FLAG=$1
+                ;;
+            *)
+                ;;
+        esac
+        shift
+    fi
+    $DAEMON -t $FLAG -c $CONFFILE
+    RETVAL="$?"
+    return $RETVAL
+}
+
+do_upgrade() {
+    OLDBINPIDFILE=$PIDFILE.oldbin
+
+    do_configtest -q || return 6
+    start-stop-daemon --stop --signal USR2 --quiet --pidfile $PIDFILE
+    RETVAL="$?"
+
+    for i in `/usr/bin/seq  $UPGRADEWAITLOOPS`; do
+        sleep $SLEEPSEC
+        if [ -f $OLDBINPIDFILE -a -f $PIDFILE ]; then
+            start-stop-daemon --stop --signal QUIT --quiet --pidfile $OLDBINPIDFILE
+            RETVAL="$?"
+            return
+        fi
+    done
+
+    echo $"Upgrade failed!"
+    RETVAL=1
+    return $RETVAL
+}
+
+do_checkreload() {
+    templog=`/bin/mktemp --tmpdir nginx-check-reload-XXXXXX.log`
+    trap '/bin/rm -f $templog' 0
+    /usr/bin/tail --pid=$$ -n 0 --follow=name /var/log/nginx/error.log > $templog &
+    /bin/sleep 1
+    start-stop-daemon --stop --signal HUP --quiet --pidfile $PIDFILE
+    /bin/sleep $CHECKSLEEP
+    /bin/grep -E "\[emerg\]|\[alert\]" $templog
+}
+
+case "$1" in
+    start)
+        [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC " "$NAME"
+        do_start
+        case "$?" in
+            0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+            2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+        esac
+        ;;
+    stop)
+        [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
+        do_stop
+        case "$?" in
+            0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+            2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+        esac
+        ;;
+  status)
+        status_of_proc -p "$PIDFILE" "$DAEMON" "$NAME" && exit 0 || exit $?
+        ;;
+  configtest)
+        do_configtest
+        ;;
+  upgrade)
+        do_upgrade
+        ;;
+  reload|force-reload)
+        log_daemon_msg "Reloading $DESC" "$NAME"
+        do_reload
+        log_end_msg $?
+        ;;
+  restart|force-reload)
+        log_daemon_msg "Restarting $DESC" "$NAME"
+        do_configtest -q || exit $RETVAL
+        do_stop
+        case "$?" in
+            0|1)
+                do_start
+                case "$?" in
+                    0) log_end_msg 0 ;;
+                    1) log_end_msg 1 ;; # Old process is still running
+                    *) log_end_msg 1 ;; # Failed to start
+                esac
+                ;;
+            *)
+                # Failed to stop
+                log_end_msg 1
+                ;;
+        esac
+        ;;
+    check-reload)
+        do_checkreload
+        RETVAL=0
+        ;;
+    *)
+        echo "Usage: $SCRIPTNAME {start|stop|status|restart|reload|force-reload|upgrade|configtest|check-reload}" >&2
+        exit 3
+        ;;
+esac
+
+exit $RETVAL

init.d/nginx-debug

@@ -0,0 +1,177 @@
+#!/bin/sh
+### BEGIN INIT INFO
+# Provides:          nginx-debug
+# Required-Start:    $network $remote_fs $local_fs 
+# Required-Stop:     $network $remote_fs $local_fs
+# Default-Start:     
+# Default-Stop:      0 1 2 3 4 5 6
+# Short-Description: Stop/start nginx
+### END INIT INFO
+
+# Author: Sergey Budnevitch <[email protected]>
+
+PATH=/sbin:/usr/sbin:/bin:/usr/bin
+
+if [ -L $0 ]; then
+    SCRIPTNAME=`/bin/readlink -f $0`
+else
+    SCRIPTNAME=$0
+fi
+
+sysconfig=`/usr/bin/basename $SCRIPTNAME`
+
+[ -r /etc/default/$sysconfig ] && . /etc/default/$sysconfig
+
+DESC=${DESC:-nginx-debug}
+NAME=${NAME:-nginx-debug}
+CONFFILE=${CONFFILE:-/etc/nginx/nginx.conf}
+DAEMON=${DAEMON:-/usr/sbin/nginx-debug}
+PIDFILE=${PIDFILE:-/var/run/nginx.pid}
+SLEEPSEC=${SLEEPSEC:-1}
+UPGRADEWAITLOOPS=${UPGRADEWAITLOOPS:-5}
+CHECKSLEEP=${CHECKSLEEP:-3}
+
+[ -x $DAEMON ] || exit 0
+
+DAEMON_ARGS="-c $CONFFILE $DAEMON_ARGS"
+
+. /lib/init/vars.sh
+
+. /lib/lsb/init-functions
+
+do_start()
+{
+    start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \
+        $DAEMON_ARGS
+    RETVAL="$?"
+    return "$RETVAL"
+}
+
+do_stop()
+{
+    # Return
+    #   0 if daemon has been stopped
+    #   1 if daemon was already stopped
+    #   2 if daemon could not be stopped
+    #   other if a failure occurred
+    start-stop-daemon --stop --quiet --oknodo --retry=TERM/30/KILL/5 --pidfile $PIDFILE
+    RETVAL="$?"
+    rm -f $PIDFILE
+    return "$RETVAL"
+}
+
+do_reload() {
+    #
+    start-stop-daemon --stop --signal HUP --quiet --pidfile $PIDFILE
+    RETVAL="$?"
+    return "$RETVAL"
+}
+
+do_configtest() {
+    if [ "$#" -ne 0 ]; then
+        case "$1" in
+            -q)
+                FLAG=$1
+                ;;
+            *)
+                ;;
+        esac
+        shift
+    fi
+    $DAEMON -t $FLAG -c $CONFFILE
+    RETVAL="$?"
+    return $RETVAL
+}
+
+do_upgrade() {
+    OLDBINPIDFILE=$PIDFILE.oldbin
+
+    do_configtest -q || return 6
+    start-stop-daemon --stop --signal USR2 --quiet --pidfile $PIDFILE
+    RETVAL="$?"
+
+    for i in `/usr/bin/seq  $UPGRADEWAITLOOPS`; do
+        sleep $SLEEPSEC
+        if [ -f $OLDBINPIDFILE -a -f $PIDFILE ]; then
+            start-stop-daemon --stop --signal QUIT --quiet --pidfile $OLDBINPIDFILE
+            RETVAL="$?"
+            return
+        fi
+    done
+
+    echo $"Upgrade failed!"
+    RETVAL=1
+    return $RETVAL
+}
+
+do_checkreload() {
+    templog=`/bin/mktemp --tmpdir nginx-check-reload-XXXXXX.log`
+    trap '/bin/rm -f $templog' 0
+    /usr/bin/tail --pid=$$ -n 0 --follow=name /var/log/nginx/error.log > $templog &
+    /bin/sleep 1
+    start-stop-daemon --stop --signal HUP --quiet --pidfile $PIDFILE
+    /bin/sleep $CHECKSLEEP
+    /bin/grep -E "\[emerg\]|\[alert\]" $templog
+}
+
+case "$1" in
+    start)
+        [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC " "$NAME"
+        do_start
+        case "$?" in
+            0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+            2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+        esac
+        ;;
+    stop)
+        [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
+        do_stop
+        case "$?" in
+            0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+            2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+        esac
+        ;;
+  status)
+        status_of_proc -p "$PIDFILE" "$DAEMON" "$NAME" && exit 0 || exit $?
+        ;;
+  configtest)
+        do_configtest
+        ;;
+  upgrade)
+        do_upgrade
+        ;;
+  reload|force-reload)
+        log_daemon_msg "Reloading $DESC" "$NAME"
+        do_reload
+        log_end_msg $?
+        ;;
+  restart|force-reload)
+        log_daemon_msg "Restarting $DESC" "$NAME"
+        do_configtest -q || exit $RETVAL
+        do_stop
+        case "$?" in
+            0|1)
+                do_start
+                case "$?" in
+                    0) log_end_msg 0 ;;
+                    1) log_end_msg 1 ;; # Old process is still running
+                    *) log_end_msg 1 ;; # Failed to start
+                esac
+                ;;
+            *)
+                # Failed to stop
+                log_end_msg 1
+                ;;
+        esac
+        ;;
+    check-reload)
+        do_checkreload
+        RETVAL=0
+        ;;
+    *)
+        echo "Usage: $SCRIPTNAME {start|stop|status|restart|reload|force-reload|upgrade|configtest|check-reload}" >&2
+        exit 3
+        ;;
+esac
+
+exit $RETVAL

logrotate.d/nginx

@@ -0,0 +1,15 @@
+/var/log/nginx/*.log {
+        daily
+        missingok
+        rotate 52
+        compress
+        delaycompress
+        notifempty
+        create 640 nginx adm
+        sharedscripts
+        postrotate
+                if [ -f /var/run/nginx.pid ]; then
+                        kill -USR1 `cat /var/run/nginx.pid`
+                fi
+        endscript
+}