Weboria

argus-nginx (1.30.1+argus0~dev20260826001211+9593c9e-1)

Published 2026-08-26 00:23:25 +00:00 by tech

Installation

sudo curl https://git-cloud.weboria.eu/api/packages/Weboria/debian/repository.key -o /etc/apt/keyrings/gitea-Weboria.asc
echo "deb [signed-by=/etc/apt/keyrings/gitea-Weboria.asc] https://git-cloud.weboria.eu/api/packages/Weboria/debian $distribution $component" | sudo tee -a /etc/apt/sources.list.d/gitea.list
sudo apt update

Choose $distribution and $component from the list below.

sudo apt install argus-nginx=1.30.1+argus0~dev20260826001211+9593c9e-1

Repository Info

Distributions
develop, staging
Components
main
Architectures
amd64

About this package

ARGUS data-plane nginx (ModSecurity v3, HTTP/3, Brotli) Custom nginx 1.30.1 build for the ARGUS security appliance, statically configured with: * ModSecurity v3 (libmodsecurity 3.0.15) via the ModSecurity-nginx connector 1.0.4, dynamically loaded * HTTP/3 (QUIC) support (--with-http_v3_module) * Brotli compression (ngx_brotli) * headers-more-nginx-module . This package occupies the same packaging slot ADR-0035's future Rust proxy engine will use (Provides: argus-http-engine), and replaces Debian's own nginx entirely rather than coexisting with it (Conflicts: nginx, nginx-core, nginx-full) — the two cannot share :80/:443 meaningfully on the same appliance. . Runs entirely unprivileged: argus-nginx.service starts the master and all worker processes as the argus user, using AmbientCapabilities= CAP_NET_BIND_SERVICE instead of a root master that drops privileges. . Requires argus-nginx-crs for the OWASP Core Rule Set referenced by the default ModSecurity configuration.

Dependencies

libbrotli1 (>= 0.6.0)
libc6 (>= 2.38)
libcrypt1 (>= 1:4.1.0)
libcurl4t64 (>= 7.16.2)
libgcc-s1 (>= 3.0)
libgeoip1t64 (>= 1.6.12)
liblmdb0 (>= 0.9.7)
liblua5.3-0
libpcre2-8-0 (>= 10.22)
libssl3t64 (>= 3.5.0)
libstdc++6 (>= 14)
libxml2 (>= 2.8.0)
libyajl2 (>= 2.0.4)
zlib1g (>= 1:1.1.4)
systemd | systemd-standalone-sysusers | systemd-sysusers
argus-nginx-crs