Sync changes to SLFO-1.2 branch

- Changed nginx.logrotate and nginx-conf.patch files.
  * Removed hardcoded user and group definitions.
- Removed ending slashes wherever possible.
- Removed root privileges when running logrotate (bsc#1246090).

OBS-URL: https://build.opensuse.org/request/show/1293972
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nginx?expand=0&rev=102

nginx-1.27.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bd7ba68a6ce1ea3768b771c7e2ab4955a59fb1b1ae8d554fedb6c2304104bdfc
-size 1245244

nginx-1.27.1.tar.gz.asc

@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQJHBAABCAAxFiEE1nhs4wPZqQIpmNxsyEZNVJr3XAoFAma7Vi8THHMua2FuZGF1
-cm92QGY1LmNvbQAKCRDIRk1UmvdcCtRUEACjv3LHnzN3J1c6h5C9cKTjIIKa4PgA
-fM8o41QenN6HMQ8a0ww8zH2zdDUxVr9OgNBV0sqtsL5SX+BuMTjGC75M5qgk45yd
-E6FMk2tJ69wVqmN1zP5sYV5n7dmt89mh7W3J3lO4XpgqCQcogmmyMg+1Z9vvO4Nt
-VvYO7w45oEqc5rb7IjWtktNS3jjf2Kat6azhOvrbMjuCUt/pOBJiM11diLmURtEx
-xE5It7bFwoywJUtjF7XUMeOGljH5VnxTLuIlq/5FkAYklu484B2iLHidhCLfq7g7
-9FJO3XatFrRefA7ryawZ9AnQtrLIt0YZdIEweoOxp16kj3mCmqhF/aeBNAcnQUAM
-EZLX/BBYA6cog8YuWffan9G5EYvul0tdXK5DQF8vUjBfw54aI4YnA5TDtSMniBEJ
-SJrUCbKazGFwd+K94IrGD8EwypEC+M3gQovNn34NikLr1Xe8Uz3i2x7y0OgYxbUh
-hH+ilD5XS0bHfueydYIKl85muwFtiIs3b0EhfvGf4z5d2DmvZ3/cYxjYpzZG0r7L
-WckCqgj2uVXvR3phDqpm0aNd8C+4sho+PQmXon8PbIpjuVLvQhz0XiH6D7H61wks
-XWNvBFHNjeBJYjaZQQ/2kAKfdwdpYTYvDd3Rlnscn3BNQvu9prWUDCYiNHMnNnOB
-ueop2LrbK54ogg==
-=bwlL
------END PGP SIGNATURE-----

nginx-1.27.2.tar.gz.asc

@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+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+=PkLy
+-----END PGP SIGNATURE-----

nginx.changes

@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Wed Aug 13 09:18:21 UTC 2025 - Felix Schnizlein <fschnizlein@suse.com>
+
+- Drop root priviledges while running logrotate (bsc#1246090)
+
+-------------------------------------------------------------------
+Thu Oct  3 06:22:15 UTC 2024 - Илья Индиго <ilya@ilya.top>
+
+- Updated to 1.27.2
+  * https://nginx.org/en/CHANGES
+  * Added SSL certificates, secret keys, and CRLs are now cached on start
+    or during reconfiguration.
+  * Added client certificate validation with OCSP in the stream module.
+  * Added OCSP stapling support in the stream module.
+  * Added the "proxy_pass_trailers" directive in the ngx_http_proxy_module.
+  * Added the "ssl_client_certificate" directive now supports certificates
+    with auxiliary information.
+  * Changed now the "ssl_client_certificate" directive is not required
+    for client SSL certificates verification.
+
+-------------------------------------------------------------------
+Fri Sep 27 17:32:21 UTC 2024 - Thorsten Kukuk <kukuk@suse.com>
+
+- Add /srv/www to filelist [bsc#1231027]
+
 -------------------------------------------------------------------
 Fri Aug 16 02:21:19 UTC 2024 - Илья Индиго <ilya@ilya.top>
 

nginx.logrotate

@@ -1,4 +1,5 @@
 /var/log/nginx/*.log {
+    su nginx nginx
     compress
     dateext
     maxage 365

nginx.spec

@@ -23,7 +23,7 @@
 %bcond_with    ngx_google_perftools
 #
 Name:           nginx
-Version:        1.27.1
+Version:        1.27.2
 Release:        0
 Summary:        A HTTP server and IMAP/POP3 proxy server
 License:        BSD-2-Clause
@@ -68,7 +68,7 @@ Provides:       http_daemon
 Provides:       httpd
 %{?systemd_ordering}
 %sysusers_requires
-#
+
 %if %{with ngx_google_perftools}
 BuildRequires:  google-perftools-devel
 %endif
@@ -98,14 +98,8 @@ The source of %{name} [engine x] HTTP server and IMAP/POP3 proxy server.
 
 %prep
 %autosetup -p1
-
 sed -i 's/\r//g' contrib/geo2nginx.pl
-sed -i 's|#LIBDIR#|%{_libdir}|g' conf/nginx.conf
-
-%if %{with systemd}
-sed -i 's/\/var\/run/\/run/' conf/nginx.conf
-%endif
-
+sed -i -e 's|#LIBDIR#|%{_libdir}|g' -e 's|/var/run|/run|' conf/nginx.conf
 sed -i 's/^\(#define NGX_LISTEN_BACKLOG \).*/\1-1/' src/os/unix/ngx_linux_config.h
 
 %build
@@ -126,16 +120,14 @@ install -Dpm0644 %{SOURCE6} %{buildroot}%{_sysusersdir}/%{name}.conf
 rm %{buildroot}/srv/www/htdocs/index.html
 
 mkdir -p %{buildroot}%{ngx_doc_dir}
-cp -av CHANGES* LICENSE \
-  %{buildroot}%{ngx_doc_dir}
+cp -av CHANGES* LICENSE %{buildroot}%{ngx_doc_dir}
 
 mkdir -p %{buildroot}%{_datadir}/%{name}/
 mkdir -p %{buildroot}%{ngx_conf_dir}/vhosts.d/
 mkdir -p %{buildroot}%{ngx_conf_dir}/conf.d/
 
 chmod a+rx contrib/geo2nginx.pl
-cp -av contrib/geo2nginx.pl contrib/unicode2nginx/ \
-  %{buildroot}%{_datadir}/%{name}/
+cp -av contrib/geo2nginx.pl contrib/unicode2nginx/ %{buildroot}%{_datadir}/%{name}/
 
 mkdir -p %{buildroot}%{src_install_dir}
 tar -xzf %{SOURCE0} --strip-components=1 -C %{buildroot}%{src_install_dir}
@@ -197,6 +189,8 @@ rm -r $GPGTMP
 %{ngx_module_dir}/ngx_mail_module.so
 %{ngx_module_dir}/ngx_stream_module.so
 %{_mandir}/man3/%{name}.3pm*
+%dir /srv/www
+%dir /srv/www/htdocs
 /srv/www/htdocs/50x.html
 %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
 %dir %attr(750,%{ngx_user_group},%{ngx_user_group}) %{_localstatedir}/log/nginx/