Production TKControl¶

Installation from source files¶

1. Set module versions to environment variables:

   export NGINX_VERSION=1.14.2 && \
   export JANSSON_VERSION=2.10 && \
   export LIBJWT_VERSION=1.9.0
   

2. Install required libraries to build source files:

   sudo apt install -y build-essential
   sudo apt install -y wget unzip git cmake check autoconf libtool openssl libssl-dev libpcre3 libpcre3-dev zlib1g zlib1g-dev libxml2 libxml2-dev libxslt-dev libgd-dev google-perftools libgoogle-perftools-dev libperl-dev
   

3. Install nginx:

   sudo apt install -y nginx=$NGINX_VERSION-2+deb10u4
   

4. Stop and disconnect nginx:

   sudo systemctl stop nginx
   sudo systemctl disable nginx
   

5. Install the library to work with JSON:

   wget https://github.com/akheron/jansson/archive/v$JANSSON_VERSION.zip && \
   unzip v$JANSSON_VERSION.zip && \
   rm v$JANSSON_VERSION.zip && \
   cd jansson-$JANSSON_VERSION && \
   cmake . -DJANSSON_BUILD_SHARED_LIBS=1 -DJANSSON_BUILD_DOCS=OFF && \
   make && \
   make check && \
   sudo make install && \
   cd ..
   

6. Install the library for working with JWT tokens:

   wget https://github.com/benmcollins/libjwt/archive/v$LIBJWT_VERSION.zip && \
   unzip v$LIBJWT_VERSION.zip && \
   rm v$LIBJWT_VERSION.zip && \
   cd libjwt-$LIBJWT_VERSION && \
   autoreconf -i && \
   ./configure && \
   make all && \
   sudo make install && \
   cd ..
   

7. Download the nginx module for working with JWT tokens:

   git clone https://github.com/TeslaGov/ngx-http-auth-jwt-module
   

8. Build nginx with required modules:

   wget http://nginx.org/download/nginx-$NGINX_VERSION.tar.gz && \
   tar -xzf nginx-$NGINX_VERSION.tar.gz && \
   rm nginx-$NGINX_VERSION.tar.gz && \
   cd nginx-$NGINX_VERSION
   
   # Configuring nginx modules
   ./configure --add-dynamic-module=../ngx-http-auth-jwt-module \
               --prefix=/usr/share/nginx \
               --sbin-path=/usr/sbin/nginx \
               --modules-path=/usr/lib/nginx/modules \
               --conf-path=/etc/nginx/nginx.conf \
               --error-log-path=/var/log/nginx/error.log \
               --http-log-path=/var/log/nginx/access.log \
               --pid-path=/run/nginx.pid \
               --lock-path=/var/lock/nginx.lock \
               --user=www-data \
               --group=www-data \
               --build=Ubuntu \
               --http-client-body-temp-path=/var/lib/nginx/body \
               --http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
               --http-proxy-temp-path=/var/lib/nginx/proxy \
               --http-scgi-temp-path=/var/lib/nginx/scgi \
               --http-uwsgi-temp-path=/var/lib/nginx/uwsgi \
               --with-pcre \
               --with-pcre-jit \
               --with-compat \
               --with-file-aio \
               --with-threads \
               --with-http_addition_module \
               --with-http_auth_request_module \
               --with-http_dav_module \
               --with-http_flv_module \
               --with-http_gunzip_module \
               --with-http_gzip_static_module \
               --with-http_image_filter_module=dynamic \
               --with-http_mp4_module \
               --with-http_random_index_module \
               --with-http_realip_module \
               --with-http_slice_module \
               --with-http_ssl_module \
               --with-http_sub_module \
               --with-http_stub_status_module \
               --with-http_xslt_module=dynamic \
               --with-http_v2_module \
               --with-http_secure_link_module \
               --with-mail=dynamic \
               --with-mail_ssl_module \
               --with-stream=dynamic \
               --with-stream_realip_module \
               --with-stream_ssl_module \
               --with-stream_ssl_preread_module \
               --with-debug \
               --with-cc-opt='-g -O2 -fdebug-prefix-map=/build/nginx-mcUg8N/nginx-$NGINX_VERSION=. -fstack-protector-strong -Wformat -Werror=format-security -fPIC -Wdate-time -D_FORTIFY_SOURCE=2'\
               --with-ld-opt='-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -fPIC'
   
   # Build nginx
   make && \
   sudo make install && \
   cd ..
   
   # Unlink configurations of old modules
   sudo unlink /etc/nginx/modules-enabled/50-mod-http-auth-pam.conf && \
   sudo unlink /etc/nginx/modules-enabled/50-mod-http-dav-ext.conf && \
   sudo unlink /etc/nginx/modules-enabled/50-mod-http-echo.conf && \
   sudo unlink /etc/nginx/modules-enabled/50-mod-http-geoip.conf && \
   sudo unlink /etc/nginx/modules-enabled/50-mod-http-subs-filter.conf && \
   sudo unlink /etc/nginx/modules-enabled/50-mod-http-upstream-fair.conf
   
   # Add configuration for jwt module
   echo "load_module modules/ngx_http_auth_jwt_module.so;" | sudo tee /etc/nginx/modules-enabled/http-auth-jwt.conf
   

9. Update dynamic libraries:

   sudo /sbin/ldconfig