2 releases 4 tags

RSS feed

• v1.2.1 ee13ef5af6

  Compare

  nginx-config-auditor v1.2.1 Stable

  Ghost released this 2026-10-17 01:50:09 -07:00 | 18 commits to master since this release

  • ssl_ciphers: anonymous (unauthenticated) suites that aliases such as HIGH, ALL, AES or kEDH
    enable are reported when the string also sets @SECLEVEL=0 (the only way current OpenSSL negotiates
    them; checked against real nginx handshakes); LOW, EXP and AECDH tokens are weak too.

  Install

  pipx install git+https://git.canutethegreat.com/CanuteTheGreat/nginx-config-auditor.git@v1.2.1
  # or the wheel attached to this release:
  pipx install https://git.canutethegreat.com/CanuteTheGreat/nginx-config-auditor/releases/download/v1.2.1/nginx_config_auditor-1.2.1-py3-none-any.whl
  # or the single file (stdlib-only Python 3):
  curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/nginx-config-auditor/releases/download/v1.2.1/nginx_config_auditor.py
  

  SHA-256

  a7712481a65e661986af3ba39519178eec21f4d89d9feba3f46ef1c5fa779a94  nginx_config_auditor.py
  139f8f18b3fa8414db8f9b93f536dbffd9b4a2a219ec95dbffb62e03f01abb88  nginx_config_auditor-1.2.1-py3-none-any.whl
  c6cf4972116301f98217183b59868fc981e2a86c315091e7ceb860f23a367a14  nginx_config_auditor-1.2.1.tar.gz
  

  Downloads

  • nginx_config_auditor-1.2.1-py3-none-any.whl
    36 downloads · 2026-10-17 03:23:16 -07:00 · 14 KiB
  • nginx_config_auditor-1.2.1.tar.gz
    35 downloads · 2026-10-17 03:23:16 -07:00 · 27 KiB
  • nginx_config_auditor.py
    34 downloads · 2026-10-17 03:23:15 -07:00 · 30 KiB
  • SHA256SUMS
    34 downloads · 2026-10-17 03:23:17 -07:00 · 300 B

  ---

  • Source code (ZIP)
    11 downloads
  • Source code (TAR.GZ)
    12 downloads
• v1.2.0 68c41e4df7

  Compare

  nginx-config-auditor v1.2.0 Stable

  Ghost released this 2026-10-16 19:57:49 -07:00 | 21 commits to master since this release

  • Includes are followed (globs too) and the merged tree is audited, so headers or TLS settings set in an
    included snippet no longer produce false "missing" findings in every file. A directory with an
    nginx.conf is audited from it (files it never includes are listed as INFO); --local and --dump
    audit nginx -T output; --docker now runs nginx -T inside the container (docker cp as fallback).
  • Security headers are checked per server, with http-level headers inherited exactly as nginx does.
  • New checks: add_header redefinition in a location dropping inherited security headers, alias path
    traversal (location/alias trailing-slash mismatch), valid_referers none, Host $http_host,
    $uri/$document_uri in headers or redirects, unanchored Origin/Referer regexes, multi-line header
    values, security headers without always, short HSTS max-age.
  • A real parser (quotes, escapes, ${var}, multi-line directives); a config nginx can't parse exits 2.
  • --fail-on (default high, the previous behaviour).
  • Installable as a package: pipx install git+https://git.canutethegreat.com/CanuteTheGreat/nginx-config-auditor.git
    puts a nginx-config-auditor command on PATH (pyproject.toml, MIT license metadata).
  • --version flag.
  • Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
  • Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
  • CI installs the package with pip in a clean venv and checks --version/--help on every push.

  Install

  pipx install git+https://git.canutethegreat.com/CanuteTheGreat/nginx-config-auditor.git@v1.2.0
  # or the wheel attached to this release:
  pipx install https://git.canutethegreat.com/CanuteTheGreat/nginx-config-auditor/releases/download/v1.2.0/nginx_config_auditor-1.2.0-py3-none-any.whl
  # or the single file (stdlib-only Python 3):
  curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/nginx-config-auditor/releases/download/v1.2.0/nginx_config_auditor.py
  

  SHA-256

  769805c02d23162ef8d5f152bec2ded875213ba8a08bc33575bdbcb8cc1aff92  nginx_config_auditor.py
  3465a0f82eaf573b39607e1dd8f4985142f6cf82f341b5209f51cf5f78dc0548  nginx_config_auditor-1.2.0-py3-none-any.whl
  d5e271c2afe5e1aabcdfc54350abfd75c0c61b434c66605796815fab7b4f1cb8  nginx_config_auditor-1.2.0.tar.gz
  

  Downloads

  • nginx_config_auditor-1.2.0-py3-none-any.whl
    6 downloads · 2026-10-16 19:58:15 -07:00 · 13 KiB
  • nginx_config_auditor-1.2.0.tar.gz
    6 downloads · 2026-10-16 19:58:16 -07:00 · 17 KiB
  • nginx_config_auditor.py
    4 downloads · 2026-10-16 19:58:15 -07:00 · 28 KiB
  • SHA256SUMS
    6 downloads · 2026-10-16 19:58:16 -07:00 · 300 B

  ---

  • Source code (ZIP)
    4 downloads
  • Source code (TAR.GZ)
    6 downloads