# open-source nginx repository — debian & ubuntu
The latest nginx,
packaged for you.
A drop-in repository that ships nginx mainline the day it lands — TLS 1.3, HTTP/3, Brotli & Zstd, GeoIP2 and ACME, prebuilt and maintained so you never compile again.
nginx 1.31.3/OpenSSL 4.0.1/open source
# enable the repository (extrepo — debian only)
$ sudo extrepo enable n.wtf
$ sudo apt update
# install nginx with the extras
$ sudo apt install nginx-extras
$ nginx -V
nginx version: nginx-n.wtf/1.31.3
built with OpenSSL 4.0.1
$
01
Always mainline
We track the newest nginx mainline release and publish it the moment it drops. No compiling, no waiting on your distro.
02
TLS 1.3, everywhere
OpenSSL 4 is statically linked, so TLS 1.3 and HTTP/3 work even on distributions whose system OpenSSL can't keep up.
03
Batteries included
Brotli, Zstandard, QUIC + HTTP/3, GeoIP2, ACME and a dozen more modules, prebuilt into the full and extras flavors.
Install
Pick your platform. Every method pulls signed packages and gives you rolling nginx updates through apt.
Read the full guide# enable the repo via extrepo (Debian only)
sudo apt update && sudo apt install extrepo -y
sudo extrepo enable n.wtf
# install the latest nginx
sudo apt update && sudo apt install nginx-extras -y
# prerequisites
sudo apt install -y lsb-release ca-certificates apt-transport-https curl gnupg dpkg
# fetch and store the signing key
curl -sSL https://n.wtf/public.key | sudo bash -c 'gpg --dearmor > /usr/share/keyrings/n.wtf.gpg'
# add the repository
sudo bash -c 'echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/n.wtf.gpg] https://mirror-cdn.xtom.com/sb/nginx/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/n.wtf.list'
sudo apt update
sudo apt install nginx-extras -y
# prerequisites
sudo apt install -y lsb-release ca-certificates apt-transport-https curl gnupg dpkg
# fetch and store the signing key
curl -sSL https://n.wtf/public.key | sudo bash -c 'gpg --dearmor > /usr/share/keyrings/n.wtf.gpg'
# add the repository
sudo bash -c 'cat > /etc/apt/sources.list.d/n.wtf.sources << EOF
Components: main
Architectures: $(dpkg --print-architecture)
Suites: $(lsb_release -cs)
Types: deb
Uris: https://mirror-cdn.xtom.com/sb/nginx/
Signed-By: /usr/share/keyrings/n.wtf.gpg
EOF'
sudo apt update
sudo apt install nginx-extras -y
# run it
docker run --name nginx --net host --restart always \
-v $HOME/nginx-config:/usr/src/docker-nginx/conf:ro \
-d ghcr.io/u-sb/nginx
# Clone our repo
git clone https://github.com/u-sb/nginx-docker
# Change directory to nginx-docker folder
cd nginx-docker
# Run docker-compose
docker compose pull
docker compose up -d
What's inside
Everything from the Debian & Ubuntu official builds, plus these.
auth-pam
Basic authentication against the system PAM stack
cache-purge
Purge entries from proxy and FastCGI caches
dav-ext
Adds the missing WebDAV methods to nginx
echo
Shell-style echo, sleep, and subrequests in config
fancyindex
Styled directory listings with headers and sorting
headers-more
Set and clear arbitrary request and response headers
http-geoip2
Client geolocation from MaxMind GeoIP2 databases
http-ipdb
Client geolocation variables from ipip.net IPDB files
http-lua
Script request handling with LuaJIT
nchan
Pub/sub messaging over WebSocket and EventSource
ndk
Development kit required by other modules
nginx-acme
Automatic TLS certificates via the ACME protocol
ngx_brotli
Brotli compression for responses and static assets
rtmp
RTMP, HLS, and MPEG-DASH live streaming
subs-filter
Regex and string substitution on response bodies
uploadprogress
Track POST upload progress for progress bars
upstream-fair
Least-busy load balancing for upstreams
zstd-nginx-module
Zstandard response compression with dictionary support
runs on — Debian Stable · OldStable / Ubuntu LTS / Docker amd64 · arm64All features & supported OS
Ship the latest nginx today.
One line to enable the repo, one to install. Updates are handled from there.