switched nginx from boringssl to libressl

nginx/build.sh

@@ -0,0 +1,61 @@
+#!/usr/bin/env sh
+
+set -e
+
+CONFIG='
+		--prefix=/etc/nginx
+		--sbin-path=/usr/sbin/nginx
+		--modules-path=/usr/lib/nginx/modules
+		--conf-path=/etc/nginx/nginx.conf
+		--error-log-path=/var/log/nginx/error.log
+		--http-log-path=/var/log/nginx/access.log
+		--pid-path=/var/run/nginx.pid
+		--lock-path=/var/run/nginx.lock
+		--http-client-body-temp-path=/var/cache/nginx/client_temp
+		--http-proxy-temp-path=/var/cache/nginx/proxy_temp
+		--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
+		--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
+		--http-scgi-temp-path=/var/cache/nginx/scgi_temp
+		--user=nginx
+		--group=nginx
+		--with-http_ssl_module
+		--with-http_realip_module
+		--with-http_addition_module
+		--with-http_sub_module
+		--with-http_dav_module
+		--with-http_flv_module
+		--with-http_mp4_module
+		--with-http_gunzip_module
+		--with-http_gzip_static_module
+		--with-http_random_index_module
+		--with-http_secure_link_module
+		--with-http_stub_status_module
+		--with-http_auth_request_module
+		--with-http_xslt_module=dynamic
+		--with-http_geoip_module=dynamic
+		--with-threads
+		--with-stream
+		--with-stream_ssl_module
+		--with-stream_ssl_preread_module
+		--with-stream_realip_module
+		--with-stream_geoip_module=dynamic
+		--with-http_slice_module
+		--with-mail
+		--with-mail_ssl_module
+		--with-compat
+		--with-file-aio
+		--with-http_v2_module
+		--with-http_v3_module
+		--add-dynamic-module=/ngx_headers_more
+		--add-dynamic-module=/ngx_brotli
+		--add-dynamic-module=/njs/nginx
+'
+
+cd /nginx
+curl -fSL https://raw.githubusercontent.com/nginx-modules/ngx_http_tls_dyn_size/master/nginx__dynamic_tls_records_1.27.2%2B.patch -o dynamic_tls_records.patch
+patch -p1 < dynamic_tls_records.patch
+
+auto/configure $CONFIG \
+    --with-cc-opt="-I/home/luser/libressl/build/include" \
+    --with-ld-opt="-lstdc++ -L/home/luser/libressl/build/ssl -L/home/luser/libressl/build/crypto"
+make -j$(nproc)