nginx: update repository of maintained naxsi module

[JKSTAFF]

nginx: update repository of maintained naxsi moduleMaintainer: @mhusaam @Ansuel
Compile tested:
mediatek/filogic / Bananapi BPI-R3 / openwrt/openwrt@1fad1b4 (v24.10.0)

Run tested:
mediatek/filogic / Bananapi BPI-R3 / openwrt/openwrt@1fad1b4 (v24.10.0)

Description:
This improvement switches the naxsi-module repository to an actively maintained fork recomanded by nbs-system due to the original project is officially abandoned (archived in 2023.11.08). The current version causes syntax error when reading the default naxsi_core.rules and other blocking and whitelist rules file as below:

Naxsi-Config : Incorrect line MainRule rx:select|union|update|delete|insert|table|from|ascii|hex|unhex|drop|load_file|substr|group_concat|dumpfile (nginx-1.26.1/nginx-mod-naxsi/naxsi_src/naxsi_skeleton.c/973)... in /etc/nginx/naxsi_core.rules:23

[Ansuel]

@JKSTAFF can you rebase this so I we can merge? changes are ok to me!

[JKSTAFF]

@Ansuel Done rebased to the latest master. If any other steps are required or there are any mistakes in my merge, please let me know.

[Ansuel]

@JKSTAFF the pkg hash needs to be fixed. The suggested value is 2b8bf06f8e4cee95e287158c193c4930deab097bf1491c03a95dd8b0c2682d4c

[GeorgeSapkin]

@JKSTAFF you need to squash your commits.

[JKSTAFF]

@GeorgeSapkin Commits have been squashed. Thank you.

[openwrt]

Formality Check: Failed

We completed the verification flow. Please review the formatting overview logs below.

🛑 CRITICAL ERRORS

Commit 9e841d1 - nginx: update repository of maintained naxsi module:

• Author name format is invalid ('JKSTAFF')
• Committer name format is invalid ('JKSTAFF')

⚠️ STYLISTIC WARNINGS & SUGGESTIONS

Package Release Audit:

• ⚠️ Package net/nginx content changed without a PKG_RELEASE or version bump

Tip

Do not close this pull request to make corrections. Instead, modify your existing commits (e.g. git commit --amend) and update the branch using git push --force-with-lease --force-if-includes. The checks will re-run automatically.

---

_{Something broken? Consider reporting an issue.
Running version 026bbbc deployed on 2026-07-09 08:15:56 CEST}

[JKSTAFF]

Is it necessary to define the conffiles path for this nginx module?

[openwrt-ai]

Reviewed the single new commit (68f089c).

Commit checks

• Stray fix pkg hash line in the commit message. After squashing, the message ends with a dangling fix pkg hash line below the Signed-off-by: trailer. This is leftover fixup noise and breaks the trailer block — please remove it (fold it into the body or drop it) so the message is just the subject, description, and the sign-off.
• Invalid author / Signed-off-by name (JK觸發器). The FormalityCheck "Git & Commits" run fails on this. OpenWrt requires a real name for the commit author and matching Signed-off-by:; the CJK handle is rejected. Please set git config user.name to your real name and re-sign the commit.
• Minor: recomanded in the body is a typo for recommended.

The two inline comments cover the remaining CI blockers (missing conffiles) and the missing PKG_RELEASE bump. I did not verify the naxsi_config/ → naxsi_rules/ path against the wargio/naxsi tree, but the directory rename matches the fork's restructuring and co-maintainer @Ansuel has confirmed the change is acceptable.

---

Generated by Claude Code

[openwrt-ai]

The naxsi module's source repo, revision and hash all change here, so the built nginx-mod-naxsi package content changes — but PKG_RELEASE is still 1. OpenWrt convention is to bump PKG_RELEASE whenever a package's built output changes, so users receive the rebuilt package on opkg upgrade. This is also the "Package net/nginx content changed without a PKG_RELEASE or version bump" warning from the FormalityCheck bot. Please bump PKG_RELEASE to 2.

---

Generated by Claude Code

[openwrt-ai]

Regarding your standing question and the FormalityCheck "missing conffiles" critical error: because naxsi_core.rules is installed with $(INSTALL_CONF) into /etc/nginx, it is a user-editable config file, and without a conffiles block it would be silently overwritten on every sysupgrade/opkg upgrade. Adding a conffiles definition to the nginx-mod-naxsi package clears the CI error and preserves user edits, e.g.:

define Package/nginx-mod-naxsi/conffiles
/etc/nginx/naxsi_core.rules
endef

Note this pre-dates your change (the old line also used INSTALL_CONF), so it is not something you introduced — but since it currently blocks the merge, worth fixing here.

---

Generated by Claude Code

[JKSTAFF]

Fixed invalid formats and added suggested values for conffiles

[openwrt-ai]

Reviewed 1 new commit (9e841d1); the PR was squashed and rebased onto current master since my last review. Two items from that review are now resolved: the missing conffiles block has been added correctly (and FormalityCheck / OpenWrt Makefiles is green), and the commit message no longer has the stray fix pkg hash line or the recomanded typo.

Commit checks

• Author/committer name is still rejected by CI. FormalityCheck / Git & Commits fails with Author name format is invalid ('JKSTAFF') and Committer name format is invalid ('JKSTAFF'). The previous CJK handle was replaced, but OpenWrt requires a real personal name (given + family name); the single all-caps token JKSTAFF is still rejected. Set git config user.name "Your Real Name", then git commit --amend --reset-author -s (or re-sign) so the author, committer, and Signed-off-by: line all carry your real name.

For continuity: the previously flagged PKG_RELEASE bump is still outstanding — PKG_RELEASE remains 1 while the naxsi module's built content changes. That thread is still current, so I'm not duplicating it inline.

---

Generated by Claude Code