anchor.diff:          nginx \
       ; \
       \
  -	apk add --no-cache --virtual .build-deps \
  -		gcc \
  -		libc-dev \
  -		make \
  -		openssl-dev \
  -		pcre-dev \
  -		zlib-dev \
  -		linux-headers \
  -		curl \
  -		gnupg \
  -		libxslt-dev \
  -		gd-dev \
  -		geoip-dev \
  +    apk add --no-cache --virtual .build-deps \
  +        gcc \
  +        libc-dev \
  +        make \
  +        openssl-dev \
  +        pcre-dev \
  +        zlib-dev \
  +        linux-headers \
  +        curl \
  +        gnupg \
  +        libxslt-dev \
  +        gd-dev \
  +        geoip-dev \
       ; \
       \
       cd /tmp ; \
  -	curl \
  +    curl \
           -fSL \
           http://nginx.org/download/nginx-$nginx_version.tar.gz \
           -o nginx.tar.gz \
       ; \
  -	curl \
  +    curl \
           -fSL \
           http://nginx.org/download/nginx-$nginx_version.tar.gz.asc \
           -o nginx.tar.gz.asc \
  
positive.code:     \
      tar -xzf naxsi.tar.gz ; \
      tar -xzf nginx.tar.gz ; \
  	rm \
          naxsi.tar.gz \
          nginx.tar.gz \
      ; \
      \
  	cd /tmp/nginx-$nginx_version ; \
  	./configure $config ; \
  	make -j$(getconf _NPROCESSORS_ONLN) ; \
  	make install ; \
  	rm -rf /etc/nginx/html/ ; \
  	mkdir /etc/nginx/conf.d/ ; \
  	mkdir -p /usr/share/nginx/html/ ; \
  	install -m644 \
          ../naxsi-$NAXSI_VERSION/naxsi_config/naxsi_core.rules \
          /etc/nginx \
      ; \
  	install -m644 html/index.html /usr/share/nginx/html/ ; \
  	install -m644 html/50x.html /usr/share/nginx/html/ ; \
  	ln -s ../../usr/lib/nginx/modules /etc/nginx/modules ; \
  	strip /usr/sbin/nginx* ; \
  	strip /usr/lib/nginx/modules/*.so ; \
  	rm -rf \
          /tmp/naxsi-$NAXSI_VERSION \
          /tmp/nginx-$nginx_version \
      ; \
  	\
  	apk add --no-cache --virtual .build-deps gettext ; \
  	mv /usr/bin/envsubst /tmp/ ; \
  	\
  	run_deps="$( \
  		scanelf \
                  --needed \
                  --nobanner \
                  /usr/sbin/nginx \
                  /usr/lib/nginx/modules/*.so \
                  /tmp/envsubst \
  			| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
  			| sort -u \
  			| xargs -r apk info --installed \
  			| sort -u \
  	    )" \
      ; \
  	apk add --no-cache --virtual .nginx-run-deps $run_deps ; \
  	apk del .build-deps ; \
  	mv /tmp/envsubst /usr/local/bin/ ; \
  	\
  	ln -sf /dev/stdout /var/log/nginx/access.log ; \
  	ln -sf /dev/stderr /var/log/nginx/error.log ;
  
  COPY nginx.conf /etc/nginx/nginx.conf
  COPY nginx.vh.default.conf /etc/nginx/conf.d/default.conf
  
negative.code:         https://github.com/nbs-system/naxsi/archive/$NAXSI_VERSION.tar.gz \
          -o naxsi.tar.gz \
      ; \
      curl \
          -fSL \
          https://github.com/nbs-system/naxsi/releases/download/$NAXSI_VERSION/naxsi-$NAXSI_VERSION.tar.gz.asc \
          -o naxsi.tar.gz.asc \
      ; \
      \
      export GNUPGHOME="$(mktemp -d)" ; \
      gpg \
          --keyserver "pgp.mit.edu" \
          --keyserver-options timeout=10 \
          --recv-keys $gpg_keys \
      ; \
      gpg --batch --verify nginx.tar.gz.asc nginx.tar.gz ; \
      gpg --batch --verify naxsi.tar.gz.asc naxsi.tar.gz ; \
      rm -r \
          "$GNUPGHOME" \
          naxsi.tar.gz.asc \
          nginx.tar.gz.asc \
  