Release 6.5.16 - See CHANGELOG.md

Author: tiredofit

CHANGELOG.md

@@ -1,3 +1,9 @@
+## 6.5.16 2025-04-25 <dave at tiredofit dot ca>
+
+   ### Added
+      - Add NGINX_AUTHENTICATION_LLNG_BUFFERS+BUFFER_SIZE environment variables for tuneable performance
+
+
 ## 6.5.15 2025-04-25 <dave at tiredofit dot ca>
 
    ### Added

README.md

@@ -188,6 +188,8 @@ You can choose to request visitors be authenticated before accessing your site.
 | `NGINX_AUTHENTICATION_LLNG_HANDLER_HOST`    | If `LLNG` chosen use hostname and port of handler. Add multiple by seperating with comments | `llng-handler:2884` | x       |
 | `NGINX_AUTHENTICATION_LLNG_HANDLER_PORT`    | If `LLNG` chosen use this port for handler                                                  | `2884`              | x       |
 | `NGINX_AUTHENTICATION_LLNG_ATTRIBUTE1`      | Syntax: HEADER_NAME, Variable, Upstream Variable - See note below                           |                     |         |
+| `NGINX_AUTHENTICATION_LLNG_BUFFERS`    | FastCGI Buffers for performance                                                 | `32 32k`              |        |
+| `NGINX_AUTHENTICATION_LLNG_BUFFER_SIZE`    | FastCGI Buffer size for performance                                                  | `32k`              |        |
 | `NGINX_AUTHENTICATION_LLNG_ATTRIBUTE2`      | Syntax: HEADER_NAME, Variable, Upstream Variable - See note below                           |                     |         |
 
 When working with `NGINX_AUTHENTICATION_LLNG_ATTRIBUTE2` you will need to omit any `$` chracters from your string. It will be added in upon container startup. Example:

install/assets/defaults/10-nginx

@@ -10,6 +10,8 @@ NGINX_AUTHENTICATION_LDAP_SCOPE=${NGINX_AUTHENTICATION_LDAP_SCOPE:-"sub"}
 NGINX_AUTHENTICATION_LLNG_HANDLER_HOST=${NGINX_AUTHENTICATION_LLNG_HANDLER_HOST:-"llng-handler:2884"}
 NGINX_AUTHENTICATION_LLNG_HANDLER_PORT=${NGINX_AUTHENTICATION_LLNG_HANDLER_PORT:-"2884"}
 NGINX_AUTHENTICATION_LLNG_ATTRIBUTE1=${NGINX_AUTHENTICATION_LLNG_ATTRIBUTE1:-"HTTP_AUTH_USER,uid,upstream_http_uid"}
+NGINX_AUTHENTICATION_LLNG_FASTCGI_BUFFERS=${NGINX_AUTHENTICATION_LLNG_FASTCGI_BUFFERS:-"32 32k"}
+NGINX_AUTHENTICATION_LLNG_FASTCGI_BUFFER_SIZE=${NGINX_AUTHENTICATION_LLNG_FASTCGI_BUFFER_SIZE:-"32k"}
 NGINX_AUTHENTICATION_TITLE=${NGINX_AUTHENTICATION_TITLE:-"Please login"}
 NGINX_AUTHENTICATION_TYPE=${NGINX_AUTHENTICATION_TYPE:-"NONE"}
 NGINX_BLOCK_BOTS_WHITELIST_IP=${NGINX_BLOCK_BOTS_WHITELIST_IP:-"127.0.0.1,10.0.0.0/8,172.16.0.0/12,192.168.0.0/24"}

install/assets/functions/10-nginx

@@ -67,7 +67,11 @@ EOF
             echo "}" >> /etc/nginx/snippets/authentication/llng_upstream
             sed -i -e "/# Do not delete - Upstream Configuration/a\ \ \ \ include \/etc\/nginx\/snippets\/authentication\/llng_upstream;" /etc/nginx/nginx.conf
             sed -i -e "/# Do not delete - Upstream Configuration/a\ \ \ \ ### LLNG Authentication Multiple Handlers configuration" /etc/nginx/nginx.conf
-            update_template /etc/nginx/snippets/authentication/llng_location_block NGINX_AUTHENTICATION_LLNG_HANDLER_PORT
+            update_template \
+                            /etc/nginx/snippets/authentication/llng_location_block \
+                                NGINX_AUTHENTICATION_LLNG_HANDLER_PORT \
+                                NGINX_AUTHENTICATION_LLNG_FASTCGI_BUFFER_SIZE \
+                                NGINX_AUTHENTICATION_LLNG_FASTCGI_BUFFERS
 
             if [ ! -f "/etc/cont-init.d/20-php-fpm" ]; then
                 header_num=$(printenv | sort | grep -c '^NGINX_AUTHENTICATION_LLNG_ATTRIBUTE.*')

install/etc/nginx/snippets/authentication/llng_location_block

@@ -9,6 +9,9 @@
             fastcgi_param HOST $http_host;
             fastcgi_param X_ORIGINAL_URI  $original_uri;
             fastcgi_param UNIQUE_ID $request_id;
+            fastcgi_buffer_size {{NGINX_AUTHENTICATION_LLNG_FASTCGI_BUFFER_SIZE}};
+            fastcgi_buffers {{NGINX_AUTHENTICATION_LLNG_FASTCGI_BUFFERS}};
+
             proxy_http_version 1.1;
             proxy_set_header Connection "";
         }