Weboria

argus-nginx (1.12.1+argus0~dev20260918091952+f5612f7-1)

Published 2026-09-18 09:26:09 +00:00 by tech

Installation

sudo curl https://git-cloud.weboria.eu/api/packages/Weboria/debian/repository.key -o /etc/apt/keyrings/gitea-Weboria.asc
echo "deb [signed-by=/etc/apt/keyrings/gitea-Weboria.asc] https://git-cloud.weboria.eu/api/packages/Weboria/debian $distribution $component" | sudo tee -a /etc/apt/sources.list.d/gitea.list
sudo apt update

Choose $distribution and $component from the list below.

sudo apt install argus-nginx=1.12.1+argus0~dev20260918091952+f5612f7-1

Repository Info

Distributions
develop, staging
Components
main
Architectures
amd64

About this package

ARGUS data-plane reverse proxy (Angie, ModSecurity v3, HTTP/3, Brotli) Custom Angie 1.12.1 build for the ARGUS security appliance (ADR-0059: migrated from nginx to Angie, an actively-maintained, nginx-config- syntax-compatible fork; retains the "argus-nginx" package/binary/service name for continuity with existing deployments, config generation, and control-plane code), statically configured with: * ModSecurity v3 (libmodsecurity 3.0.15) via the ModSecurity-nginx connector 1.0.4, dynamically loaded (rebuilt against Angie's own module ABI -- Angie rejects modules compiled against stock nginx) * HTTP/3 (QUIC) support (--with-http_v3_module) * Brotli compression (ngx_brotli) * headers-more-nginx-module . This package occupies the same packaging slot ADR-0035's future Rust proxy engine will use (Provides: argus-http-engine), and replaces Debian's own nginx entirely rather than coexisting with it (Conflicts: nginx, nginx-core, nginx-full) — the two cannot share :80/:443 meaningfully on the same appliance. . Runs entirely unprivileged: argus-nginx.service starts the master and all worker processes as the argus user, using AmbientCapabilities= CAP_NET_BIND_SERVICE instead of a root master that drops privileges. . Requires argus-nginx-crs for the OWASP Core Rule Set referenced by the default ModSecurity configuration.

Dependencies

argus-nginx (>= 1.30.1-1)
libbrotli1 (>= 0.6.0)
libc6 (>= 2.38)
libcrypt1 (>= 1:4.1.0)
libcurl4t64 (>= 7.16.2)
libgcc-s1 (>= 3.0)
libgeoip1t64 (>= 1.6.12)
liblmdb0 (>= 0.9.7)
liblua5.3-0
libpcre2-8-0 (>= 10.22)
libssl3t64 (>= 3.5.0)
libstdc++6 (>= 14)
libxml2 (>= 2.8.0)
libyajl2 (>= 2.0.4)
zlib1g (>= 1:1.1.4)
systemd | systemd-standalone-sysusers | systemd-sysusers
argus-nginx-crs