anchor.diff:          nginx \
       ; \
       \
  -	apk add --no-cache --virtual .build-deps \
  -		gcc \
  -		libc-dev \
  -		make \
  -		openssl-dev \
  -		pcre-dev \
  -		zlib-dev \
  -		linux-headers \
  -		curl \
  -		gnupg \
  -		libxslt-dev \
  -		gd-dev \
  -		geoip-dev \
  +    apk add --no-cache --virtual .build-deps \
  +        gcc \
  +        libc-dev \
  +        make \
  +        openssl-dev \
  +        pcre-dev \
  +        zlib-dev \
  +        linux-headers \
  +        curl \
  +        gnupg \
  +        libxslt-dev \
  +        gd-dev \
  +        geoip-dev \
       ; \
       \
       cd /tmp ; \
  -	curl \
  +    curl \
           -fSL \
           http://nginx.org/download/nginx-$nginx_version.tar.gz \
           -o nginx.tar.gz \
       ; \
  -	curl \
  +    curl \
           -fSL \
           http://nginx.org/download/nginx-$nginx_version.tar.gz.asc \
           -o nginx.tar.gz.asc \
  
positive.code:         " \
      ; \
      config=" \
  		--prefix=/etc/nginx \
  		--sbin-path=/usr/sbin/nginx \
  		--modules-path=/usr/lib/nginx/modules \
  		--conf-path=/etc/nginx/nginx.conf \
  		--error-log-path=/var/log/nginx/error.log \
  		--http-log-path=/var/log/nginx/access.log \
  		--pid-path=/var/run/nginx.pid \
  		--lock-path=/var/run/nginx.lock \
  		--http-client-body-temp-path=/var/cache/nginx/client_temp \
  		--http-proxy-temp-path=/var/cache/nginx/proxy_temp \
  		--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
  		--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
  		--http-scgi-temp-path=/var/cache/nginx/scgi_temp \
  		--user=nginx \
  		--group=nginx \
          --add-module=/tmp/naxsi-$NAXSI_VERSION/naxsi_src/ \
  		--with-http_ssl_module \
  		--with-http_realip_module \
  		--with-http_addition_module \
  		--with-http_sub_module \
  		--with-http_dav_module \
  		--with-http_flv_module \
  		--with-http_mp4_module \
  		--with-http_gunzip_module \
  		--with-http_gzip_static_module \
  		--with-http_random_index_module \
  		--with-http_secure_link_module \
  		--with-http_stub_status_module \
  		--with-http_auth_request_module \
  		--with-http_xslt_module=dynamic \
  		--with-http_image_filter_module=dynamic \
  		--with-http_geoip_module=dynamic \
  		--with-threads \
  		--with-stream \
  		--with-stream_ssl_module \
  		--with-stream_ssl_preread_module \
  		--with-stream_realip_module \
  		--with-stream_geoip_module=dynamic \
  		--with-http_slice_module \
  		--with-mail \
  		--with-mail_ssl_module \
  		--with-compat \
  		--with-file-aio \
  		--with-http_v2_module \
  	    " \
      ; \
      \
  	addgroup -S nginx ; \
  	adduser \
          -D \
          -S \
          -h /var/cache/nginx \
  
negative.code:         https://github.com/nbs-system/naxsi/archive/$NAXSI_VERSION.tar.gz \
          -o naxsi.tar.gz \
      ; \
      curl \
          -fSL \
          https://github.com/nbs-system/naxsi/releases/download/$NAXSI_VERSION/naxsi-$NAXSI_VERSION.tar.gz.asc \
          -o naxsi.tar.gz.asc \
      ; \
      \
      export GNUPGHOME="$(mktemp -d)" ; \
      gpg \
          --keyserver "pgp.mit.edu" \
          --keyserver-options timeout=10 \
          --recv-keys $gpg_keys \
      ; \
      gpg --batch --verify nginx.tar.gz.asc nginx.tar.gz ; \
      gpg --batch --verify naxsi.tar.gz.asc naxsi.tar.gz ; \
      rm -r \
          "$GNUPGHOME" \
          naxsi.tar.gz.asc \
          nginx.tar.gz.asc \
  