# open-source nginx repository — debian & ubuntu
The latest nginx,
packaged for you.
A drop-in repository that ships nginx mainline the day it lands — TLS 1.3, HTTP/3, Brotli & Zstd, GeoIP2 and ACME, prebuilt and maintained so you never compile again.
nginx 1.31.5/OpenSSL 4.0.2/open source
# enable the repository (extrepo — debian only)
$ sudo extrepo enable n.wtf
$ sudo apt update
# install nginx with the extras
$ sudo apt install nginx-extras
$ nginx -V
nginx version: nginx-n.wtf/1.31.5
built with OpenSSL 4.0.2
$
01
Always mainline
We track the newest nginx mainline release and publish it the moment it drops. No compiling, no waiting on your distro.
02
TLS 1.3, everywhere
OpenSSL 4 is statically linked, so TLS 1.3 and HTTP/3 work even on distributions whose system OpenSSL can't keep up.
03
Batteries included
Brotli, Zstandard, QUIC + HTTP/3, GeoIP2, ACME and a dozen more modules, prebuilt into the full and extras flavors.
Install
Pick your platform. Every method pulls signed packages and gives you rolling nginx updates through apt.
Read the full guide# enable the repo via extrepo (Debian only)
sudo apt update && sudo apt install extrepo -y
sudo extrepo enable n.wtf
# install the latest nginx
sudo apt update && sudo apt install nginx-extras -y
# prerequisites
sudo apt install -y lsb-release ca-certificates apt-transport-https curl gnupg dpkg
# fetch and store the signing key
curl -sSL https://n.wtf/public.key | sudo bash -c 'gpg --dearmor > /usr/share/keyrings/n.wtf.gpg'
# add the repository
sudo bash -c 'echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/n.wtf.gpg] https://mirror-cdn.xtom.com/sb/nginx/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/n.wtf.list'
sudo apt update
sudo apt install nginx-extras -y
# prerequisites
sudo apt install -y lsb-release ca-certificates apt-transport-https curl gnupg dpkg
# fetch and store the signing key
curl -sSL https://n.wtf/public.key | sudo bash -c 'gpg --dearmor > /usr/share/keyrings/n.wtf.gpg'
# add the repository
sudo bash -c 'cat > /etc/apt/sources.list.d/n.wtf.sources << EOF
Components: main
Architectures: $(dpkg --print-architecture)
Suites: $(lsb_release -cs)
Types: deb
Uris: https://mirror-cdn.xtom.com/sb/nginx/
Signed-By: /usr/share/keyrings/n.wtf.gpg
EOF'
sudo apt update
sudo apt install nginx-extras -y
# run it
docker run --name nginx --net host --restart always \
-v $HOME/nginx-config:/usr/src/docker-nginx/conf:ro \
-d ghcr.io/u-sb/nginx
# Clone our repo
git clone https://github.com/u-sb/nginx-docker
# Change directory to nginx-docker folder
cd nginx-docker
# Run docker-compose
docker compose pull
docker compose up -d
What's inside
Everything from the Debian & Ubuntu official builds, plus these.
auth-pam
Basic authentication against the system PAM stack
cache-purge
Purge entries from proxy and FastCGI caches
dav-ext
Adds the missing WebDAV methods to nginx
echo
Shell-style echo, sleep, and subrequests in config
fancyindex
Styled directory listings with headers and sorting
headers-more
Set and clear arbitrary request and response headers
http-geoip2
Client geolocation from MaxMind GeoIP2 databases
http-ipdb
Client geolocation variables from ipip.net IPDB files
http-lua
Script request handling with LuaJIT
nchan
Pub/sub messaging over WebSocket and EventSource
ndk
Development kit required by other modules
nginx-acme
Automatic TLS certificates via the ACME protocol
ngx_brotli
Brotli compression for responses and static assets
ngx_http_addition_module
Add text before and after a response body via subrequests
ngx_http_auth_request_module
Authorize requests with a subrequest to an external service
ngx_http_dav_module
File management over WebDAV with PUT, DELETE, MKCOL, COPY and MOVE
ngx_http_flv_module
Pseudo-streaming for Flash Video (FLV) files
ngx_http_geoip_module
Client country, city and organization from legacy GeoIP databases
ngx_http_gunzip_module
Decompress gzipped responses for clients without gzip support
ngx_http_gzip_static_module
Serve precompressed .gz files instead of compressing on the fly
ngx_http_image_filter_module
Resize, crop and rotate JPEG, GIF, PNG and WebP responses
ngx_http_json_module
Extract values from a JSON document into nginx variables
ngx_http_mp4_module
Pseudo-streaming and seeking for MP4, M4V and M4A files
ngx_http_perl_module
Location and variable handlers written in embedded Perl
ngx_http_random_index_module
Serve a random file from a directory as its index page
ngx_http_realip_module
Restore the client address from a proxy header or PROXY protocol
ngx_http_secure_link_module
Check link authenticity and expiry with MD5 hashes
ngx_http_slice_module
Split large proxied responses into cacheable byte-range slices
ngx_http_ssl_module
HTTPS support with certificates, protocols, ciphers and sessions
ngx_http_stub_status_module
Basic connection and request counters on a status page
ngx_http_sub_module
Replace one string with another in response bodies
ngx_http_v2_module
Serve HTTP/2 over TLS with ALPN or over cleartext TCP
ngx_http_v3_module
Serve HTTP/3 over QUIC alongside HTTPS on the same port
ngx_http_xslt_module
Transform XML responses with XSLT stylesheets
ngx_mail_module
IMAP, POP3 and SMTP proxy with HTTP-backed authentication
ngx_stream_geoip_module
Client country and city variables for stream servers
ngx_stream_module
TCP and UDP proxying with TLS termination and SNI preread
rtmp
RTMP, HLS, and MPEG-DASH live streaming
subs-filter
Regex and string substitution on response bodies
uploadprogress
Track POST upload progress for progress bars
upstream-fair
Least-busy load balancing for upstreams
zstd-nginx-module
Zstandard response compression with dictionary support
runs on — Debian Stable · OldStable / Ubuntu LTS / Docker amd64 · arm64All features & supported OS
Ship the latest nginx today.
One line to enable the repo, one to install. Updates are handled from there.