config

ngx_addon_name=ngx_http_waf_module

deps="$ngx_addon_dir/inc/ngx_http_waf_module_check.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_config.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_core.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_macro.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_type.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_util.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_ip_trie.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_token_bucket_set.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_mem_pool.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_lru_cache.h \
    $ngx_addon_dir/inc/ngx_http_waf_module_under_attack.h"

srcs="$ngx_addon_dir/src/ngx_http_waf_module_core.c \
    $ngx_addon_dir/inc/libinjection/src/libinjection_html5.c \
    $ngx_addon_dir/inc/libinjection/src/libinjection_sqli.c \
    $ngx_addon_dir/inc/libinjection/src/libinjection_xss.c"


ngx_http_waf_module_libs=""

ngx_http_waf_module_inc_path="$ngx_addon_dir/inc "

if [ -n "$LIB_UTHASH" ] ;  then
    ngx_http_waf_module_inc_path="${ngx_http_waf_module_inc_path} ${LIB_UTHASH}/include"
fi



# Check if the uthash library is installed.
ngx_feature="uthash library"
ngx_feature_name=
ngx_feature_run=no
ngx_feature_path=$ngx_http_waf_module_inc_path
ngx_feature_incs="#include <uthash.h>"
ngx_feature_libs=$ngx_http_waf_module_libs
ngx_feature_test=
. auto/feature
if [ $ngx_found = no  ] ; then 
    PWD=$(pwd)
    cat << END
$0: error: the $ngx_addon_name module requires the $ngx_feature.

Please run:
    On Ubuntu or Debian: 
            apt-get update && apt-get install --yes uthash-dev
    On Alpine: 
            apk update && apk add uthash-dev
    On other OS:
            cd /usr/local/src \\
        &&  git clone https://github.com/troydhanson/uthash.git \\
        &&  export LIB_UTHASH=/usr/local/src/uthash \\
        &&  cd $PWD

END
    PWD=''
    exit 1
fi

# Check if the C compiler supports the C99 standard.
ngx_feature="C99 features"
ngx_feature_name=
ngx_feature_run=yes
ngx_feature_path=$ngx_http_waf_module_inc_path
ngx_feature_incs=
ngx_feature_libs=$ngx_http_waf_module_libs
ngx_feature_test=$(cat << END

/* Declare variables in loops. */
for(int i = 0; i < 10; i++) {}

int i = 0, j = 0;

/* Short-circuit operation for logical expressions. */
if (i == 0 || !(j = 1)) {}

if (j == 1) { return 1; }

j = 0;

if (i != 0 && !(j = 1)) {}

if (j == 1) { return 1; }

END
)
. auto/feature
if [ $ngx_found = no  ] ; then 
    cat << END
$0: error: the $ngx_addon_name module requires the $ngx_feature, make sure your C compiler supports and enables the C99 standard.

For gcc, you can enable the C99 standard by appending the parameter --with-cc-opt='-std=gnu99'.

END
    exit 1
fi


# Check if libinjection exists.
ngx_feature="injection library"
ngx_feature_name=
ngx_feature_run=no
ngx_feature_path=$ngx_http_waf_module_inc_path
ngx_feature_incs=$(cat << END

#include <libinjection/src/libinjection.h>
#include <libinjection/src/libinjection_sqli.h>

END
)

ngx_feature_libs=$ngx_http_waf_module_libs
ngx_feature_test=
. auto/feature
if [ $ngx_found = no  ] ; then 
    PWD=$(pwd)
    cat << END
$0: error: the $ngx_addon_name module requires the $ngx_feature.

Please run cd $ngx_addon_dir && git clone https://github.com/libinjection/libinjection.git inc/libinjection && cd $PWD

END
    PWD=''
    exit 1
fi

if [ -n "$LIB_SODIUM" ] ;  then
    ngx_http_waf_module_inc_path="${ngx_http_waf_module_inc_path} ${LIB_SODIUM}/include"
    ngx_http_waf_module_libs=" ${ngx_http_waf_module_libs} -L ${LIB_SODIUM}/lib -Wl,-Bstatic -l sodium -Wl,-Bdynamic "
else
    ngx_http_waf_module_libs=" ${ngx_http_waf_module_libs}  -l sodium "
fi

# Check if libsodium exists.
ngx_feature="sodium library"
ngx_feature_name=
ngx_feature_run=no
ngx_feature_path=$ngx_http_waf_module_inc_path
ngx_feature_incs='#include <sodium.h>'
ngx_feature_libs=$ngx_http_waf_module_libs
ngx_feature_test=
. auto/feature
if [ $ngx_found = no  ] ; then 
    PWD=$(pwd)
    cat << END
$0: error: the $ngx_addon_name module requires the $ngx_feature.

Please run:
    On Ubuntu or Debian: 
            apt-get update && apt-get install --yes libsodium23 libsodium-dev
    On Alpine: 
            apk update && apk add libsodium libsodium-dev
    On other OS:
            # You can remove directories libsodium-src and libsodium after installing the ngx_http_waf_module.
            git clone https://github.com/jedisct1/libsodium --branch stable libsodium-src \\
        &&  cd libsodium-src \\
        &&  ./configure --prefix=$PWD/libsodium --with-pic \\
        &&  make -j\$(nproc) && make check -j \$(nproc) && make install \\
        &&  export LIB_SODIUM=$PWD/libsodium \\
        &&  cd $PWD

END
    PWD=''
    exit 1
fi



# Clear these variables to avoid affecting the installation of other modules.
ngx_feature=
ngx_feature_name=
ngx_feature_run=
ngx_feature_path=
ngx_feature_incs=
ngx_feature_libs=
ngx_feature_test=


if test -n "$ngx_module_link"; then
    ngx_module_type=HTTP
    ngx_module_name=$ngx_addon_name
    ngx_module_deps=$deps
    ngx_module_incs=$ngx_http_waf_module_inc_path
    ngx_module_srcs=$srcs
    ngx_module_libs=$ngx_http_waf_module_libs
    
    # Let ngx_http_rewrite_module initialize before this module,
    # so that this module can take effect before ngx_http_rewrite_module,
    # because the initialization order and the effective order are reversed.
    ngx_module_order="ngx_http_rewrite_module ${ngx_addon_name}"

    . auto/module
else
    HTTP_MODULES="$HTTP_MODULES ${ngx_addon_name}"
    HTTP_DEPS-"$HTTP_DEPS $deps"
    HTTP_INCS="$HTTP_INCS -I $ngx_addon_dir/inc"
    NGX_ADDON_SRCS="$NGX_ADDON_SRCS $srcs"
fi