00_recompile_nginx.config

packages:
  yum:
    git: []
    gd-devel: []
    perl-ExtUtils-Embed: []
    GeoIP-devel: []
    gperftools-devel: []

files:
  /root/build-nginx.sh:
    mode: "000755"
    owner: root
    group: root
    content: |
      rm -rf build
      mkdir ./build ; cd ./build

      # the headers-more-nginx-module requires nginx 1.11.2
      wget -O - http://nginx.org/download/nginx-1.11.2.tar.gz | tar xfvz -
      git clone https://github.com/nginx-shib/nginx-http-shibboleth.git
      git clone https://github.com/openresty/headers-more-nginx-module.git

      cd nginx-1.11.2/

      ./configure --add-module=../nginx-http-shibboleth \
      --add-module=../headers-more-nginx-module \
      --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx \
      --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf \
      --error-log-path=/var/log/nginx/error.log \
      --http-log-path=/var/log/nginx/access.log \
      --http-client-body-temp-path=/var/lib/nginx/tmp/client_body \
      --http-proxy-temp-path=/var/lib/nginx/tmp/proxy \
      --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi \
      --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi \
      --http-scgi-temp-path=/var/lib/nginx/tmp/scgi \
      --pid-path=/var/run/nginx.pid --lock-path=/var/lock/subsys/nginx \
      --user=nginx --group=nginx --with-file-aio --with-ipv6 \
      --with-http_ssl_module --with-http_v2_module --with-http_realip_module \
      --with-http_addition_module --with-http_xslt_module=dynamic \
      --with-http_image_filter_module=dynamic --with-http_geoip_module=dynamic \
      --with-http_sub_module --with-http_dav_module --with-http_flv_module \
      --with-http_mp4_module --with-http_gunzip_module \
      --with-http_gzip_static_module --with-http_random_index_module \
      --with-http_secure_link_module --with-http_degradation_module \
      --with-http_slice_module --with-http_stub_status_module \
      --with-http_perl_module=dynamic --with-http_auth_request_module \
      --with-mail=dynamic --with-mail_ssl_module --with-pcre --with-pcre-jit \
      --with-stream=dynamic --with-stream_ssl_module \
      --with-google_perftools_module --with-debug \
      --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' \
      --with-ld-opt=' -Wl,-E'

      make
      make install

commands:
  01_build_nginx:
    test: test -e $(2>&1 nginx -V | tr -- - '\n' | grep _module | grep shib)
    command: chmod +x ~/build-nginx.sh && ~/build-nginx.sh