anchor.diff:  ENTRYPOINT ["docker-entrypoint.sh"]
   
   LABEL description="nginx mainline built from source with ngx_headers_more, ngx_brotli and TCP Fast Open" \
  -	  	openssl="LibreSSL $LIBRESSL_VERSION" \
  -	 	 nginx="nginx $NGINX_VERSION"
  +		openssl="LibreSSL $LIBRESSL_VERSION" \
  +		nginx="nginx $NGINX_VERSION"
   
   EXPOSE 8080 4430
   CMD ["nginx", "-g", "daemon off;"]
  
positive.code: 		&& apk add --no-cache --virtual .gettext gettext \
  		&& mv /usr/bin/envsubst /tmp/ \
  		&& runDeps="$( \
  			scanelf --needed --nobanner /usr/sbin/nginx /tmp/envsubst \
  			| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
  			| sort -u \
  			| xargs -r apk info --installed \
  			| sort -u \
  		) tzdata ca-certificates" \
  		&& apk add --no-cache --virtual .nginx-rundeps $runDeps \
  		&& apk del .build-deps \
  		&& apk del .gettext \
  		&& mv /tmp/envsubst /usr/local/bin/ \
  		&& rm -rf \
  			/tmp/* \
  			/var/cache/apk/* \
  			/root/.gnupg \
  			/usr/src \
  			/libressl.tar.gz.asc \
  			/nginx.tar.gz.asc
  
  COPY nginx.conf /etc/nginx/nginx.conf
  COPY default.conf /etc/nginx/conf.d/default.conf
  
negative.code: 		--add-module=/usr/src/ngx_brotli"
  
  RUN apk add --no-cache --virtual .build-deps \
  		gcc \
  		musl-dev \
  		make \
  		openssl-dev \
  		pcre-dev \
  		zlib-dev \
  		linux-headers \
  		curl \
  		gnupg \
  		libxslt-dev \
  		gd-dev \
  		geoip-dev \
  		git \
  		autoconf \
  		automake \
  		libtool \
  		file \
  		patch \
  		&& curl -fSL http://nginx.org/download/nginx-$NGINX_VERSION.tar.gz -o nginx.tar.gz \
  		&& curl -fSL http://nginx.org/download/nginx-$NGINX_VERSION.tar.gz.asc -o nginx.tar.gz.asc \
  		&& found=''; \
  		( \
  		gpg --no-tty --keyserver pgp.mit.edu --recv-keys $NGINX_FINGERPRINT || \
  		gpg --no-tty --keyserver keyserver.pgp.com --recv-keys $NGINX_FINGERPRINT || \
  		gpg --no-tty --keyserver ha.pool.sks-keyservers.net --recv-keys $NGINX_FINGERPRINT \
  		) \
  		&& found=yes && break; \
  		test -z "$found" && echo >&2 "error: failed to fetch GPG key $NGINX_FINGERPRINT" && exit 1; \
  		gpg --verify nginx.tar.gz.asc \
  		&& curl -fSL http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-$LIBRESSL_VERSION.tar.gz -o libressl.tar.gz \
  		&& curl -fSL http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-$LIBRESSL_VERSION.tar.gz.asc -o libressl.tar.gz.asc \
  		&& found=''; \
  		( \
  		gpg --no-tty --keyserver pgp.mit.edu --recv-keys $LIBRESSL_FINGERPRINT || \
  		gpg --no-tty --keyserver keyserver.pgp.com --recv-keys $LIBRESSL_FINGERPRINT || \
  		gpg --no-tty --keyserver ha.pool.sks-keyservers.net --recv-keys $LIBRESSL_FINGERPRINT \
  		) \
  		&& found=yes && break; \
  		test -z "$found" && echo >&2 "error: failed to fetch GPG key $LIBRESSL_FINGERPRINT" && exit 1; \
  		gpg --verify libressl.tar.gz.asc \
  		&& git clone --depth 1 https://github.com/bagder/libbrotli /usr/src/libbrotli \
  		&& ( \
  		cd /usr/src/libbrotli \
  		&& ./autogen.sh \
  		&& ./configure \
  		&& make -j$(getconf _NPROCESSORS_ONLN) \
  		&& make install \
  		) \
  		&& git clone --depth=1 --recurse-submodules https://github.com/google/ngx_brotli /usr/src/ngx_brotli \
  		&& git clone --depth=1 https://github.com/openresty/headers-more-nginx-module /usr/src/ngx_headers_more \
  