anchor.diff:  		--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
   		--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
   		--http-scgi-temp-path=/var/cache/nginx/scgi_temp \
  -		--user=nginx \
  -		--group=nginx \
  +		--user=httpd \
  +		--group=www \
   		--with-http_ssl_module \
   		--with-http_realip_module \
   		--with-http_addition_module \
  
positive.code: ENV LUA_VERSION 2.1
  ENV lua_nginx_module_name lua-nginx-module
  ENV lua_nginx_module_version 0.10.13
  
  # prep
  RUN : \
  	&& apk update && apk upgrade \
  	&& apk add --force \
  		musl \
  		openssl \
  		libaio \
  		curl \
  		perl \
  		libstdc++ \
  		ruby \
  		ruby-etc \
  		ruby-rails \
  		ruby-rake \
  		luajit \
  		pcre \
  		bz2 \
  		libpng \
  		freetype \
  		libxpm \
  		expat \
  		tiff \
  		libxcb \
  		lua \
  		curl \
  	&& addgroup -g 1001 www \
  	&& addgroup -g 1000 kusanagi \
  	&& adduser -h /home/httpd -s /bin/false -g www -D -H  httpd \
  	&& adduser -h /home/kusanagi -s /bin/bash -G kusanagi -G www -u 1000 -D kusanagi \
  	&& chmod 755 /home/kusanagi \
  	&& mkdir -p /tmp/build \
  	&& cd /tmp/build \
  	&& wget http://nginx.org/download/nginx-${KUSANAGI_NGINX_VERSION}.tar.gz \
  	&& tar xf nginx-${KUSANAGI_NGINX_VERSION}.tar.gz \
  	&& mkdir nginx-${KUSANAGI_NGINX_VERSION}/extensions 
  
  COPY files/nginx.service /tmp/build/
  COPY files/nginx.conf /tmp/build/
  COPY files/logrotate.d_nginx /tmp/build/
  COPY files/nginx_httpd.conf /tmp/build/
  COPY files/nginx_ssl.conf /tmp/build/
  COPY files/naxsi.d.tar.gz /tmp/build/
  COPY files/kusanagi_naxsi_core.conf /tmp/build/
  COPY files/fast_cgiparams_CVE-2016-5387.patch /tmp/build/
  COPY files/naxsi-stringop-overflow.patch /tmp/build/
  COPY files/security.conf /tmp/build/
  
  # build
  RUN : \
  	&& DEP="gcc \
  		g++ \
  		make \
  		elfutils \
  		autoconf \
  		automake \
  		patch \
  		curl-dev \
  		musl-dev \
  		perl-dev \
  		openssl-dev \
  		linux-headers \
  		luajit-dev \
  
negative.code: 	&& (test -d ngx_brotli/deps/brotli && rmdir ngx_brotli/deps/brotli) \
  	&& mv brotli-${brotli_version} ngx_brotli/deps/brotli \
  	&& cd .. \
  	&& patch -p1 < ../fast_cgiparams_CVE-2016-5387.patch \
  \
  # configure
  	&& cd /tmp/build/nginx-${KUSANAGI_NGINX_VERSION} \  
  	&& CONF="\
  		--prefix=/etc/nginx \
  		--conf-path=/etc/nginx/nginx.conf \
  		--sbin-path=/usr/sbin/nginx \
  		--modules-path=/usr/lib/nginx/modules \
  		--error-log-path=/var/log/nginx/error.log \
  		--http-log-path=/var/log/nginx/access.log \
  		--pid-path=/var/run/nginx.pid \
  