initial commit

Author: dvershinin

.gitignore

@@ -0,0 +1,2 @@
+/nbproject
+/t/servroot

.idea/misc.xml

@@ -0,0 +1,37 @@
+language: c
+compiler:
+  - clang
+  - gcc
+env:
+  matrix:
+    - NGINX_VERSION=1.16.1
+    - NGINX_VERSION=1.17.8
+addons:
+  apt:
+    packages:
+      - libpcre3-dev
+      - libssl-dev
+      - perl
+      - cpanminus
+cache:
+  ccache: true
+  directories:
+    - $HOME/perl5
+before_install:
+  - test $TRAVIS_BRANCH != coverity_scan -o ${TRAVIS_JOB_NUMBER##*.} = 1 || exit 0
+  - cpanm --notest --local-lib=$HOME/perl5 Test::Nginx
+install:
+  - test $TRAVIS_BRANCH != coverity_scan || exit 0
+  - wget -O - http://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz | tar -xzf -
+  - cd nginx-${NGINX_VERSION}
+  - ./configure --with-debug --add-module=..
+  - make -j2
+  - export PATH=$(pwd)/objs:$PATH
+  - cd ..
+script:
+  - test $TRAVIS_BRANCH != coverity_scan || exit 0
+  - PERL5LIB=$HOME/perl5/lib/perl5 TEST_NGINX_VERBOSE=true prove -v
+after_failure:
+  - cat t/servroot/conf/nginx.conf
+  - cat t/servroot/access.log
+  - cat t/servroot/error.log

.idea/modules.xml

@@ -0,0 +1,25 @@
+/*
+ * Copyright (C) 2019-2020 Danila Vershinin
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */

.idea/ngx_immutable.iml

@@ -0,0 +1,94 @@
+# ngx_immutable
+
+[![Build Status](https://travis-ci.org/GetPageSpeed/ngx_immutable.svg?branch=master)](https://travis-ci.org/GetPageSpeed/ngx_immutable)
+[![Coverity Scan](https://img.shields.io/coverity/scan/GetPageSpeed-ngx_immutable)](https://scan.coverity.com/projects/GetPageSpeed-ngx_immutable)
+
+This tiny NGINX module can help improve caching of your public static assets, by setting far future expiration with `immutable` attribute.
+
+## Synopsis
+
+```
+http {
+    server {
+        location /static/ {
+            immutable on;
+        }
+    }
+}
+```
+
+will yield the following HTTP headers:
+
+```
+...
+Cache-Control: public,max-age=31536000,immutable
+Expires: Thu, 31 Dec 2037 23:55:55 GMT 
+...
+```
+
+How it's different to `expires max;`:
+
+* Sets `immutable` attribute, e.g. `Cache-Control: public,max-age=31536000,immutable` for improved caching
+* Sends `Expires` only when it's really necessary, e.g. when a client is requesting resources over `HTTP/1.0`
+* Sets `public` attribute to ensure the assets can be cached by public caches, which is typically a desired thing.
+
+Thus in most cases, `immutable on;` can be used as as a better alternative to `expires max;`.
+
+## Installation 
+
+### CentOS/RHEL 6, 7, 8
+
+    sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
+    sudo yum -y install nginx-module-immutable
+
+Follow the installation prompt to import GPG public key that is used for verifying packages.
+
+Then add the following at the top of your `/etc/nginx/nginx.conf`:
+
+    load_module modules/ngx_http_immutable_module.so;
+
+## Example: Magento 2 production configuration
+
+Provided that your store runs in production mode, you have already compiled all the assets.
+This [sample config](https://github.com/magento/magento2/blob/2.3.4/nginx.conf.sample#L103-L134) can be optimized to:
+
+```
+location /static/ {
+    immutable on;
+
+    # Remove signature of the static files that is used to overcome the browser cache
+    location ~ ^/static/version {
+        rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+    }
+
+    location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2|json)$ {
+        add_header X-Frame-Options "SAMEORIGIN";
+    }
+    location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+        add_header Cache-Control "no-store";
+        add_header X-Frame-Options "SAMEORIGIN";
+        immutable off;
+    }
+    add_header X-Frame-Options "SAMEORIGIN";
+}
+```
+
+When used together with `ngx_security_headers`, it can be simplified further:
+
+```
+security_headers on;
+
+location /static/ {
+    immutable on;
+
+    
+    location ~ ^/static/version {
+        rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
+    }
+
+    location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
+        add_header Cache-Control "no-store";
+        immutable off;
+    }
+}
+```

.idea/workspace.xml

@@ -0,0 +1,12 @@
+ngx_addon_name=ngx_http_immutable_module
+
+if test -n "$ngx_module_link"; then
+    ngx_module_type=HTTP_AUX_FILTER
+    ngx_module_name=ngx_http_immutable_module
+    ngx_module_srcs="$ngx_addon_dir/src/ngx_http_immutable.c"
+
+    . auto/module
+else
+    HTTP_AUX_FILTER_MODULES="$HTTP_AUX_FILTER_MODULES ngx_http_immutable_module"
+    NGX_ADDON_SRCS="$NGX_ADDON_SRCS $ngx_addon_dir/src/ngx_http_immutable.c"
+fi