nginx

nginx configuration: security mistakes, and a configuration test in a container.

Checks

Check	Stage	Level	What it does
nginx/gixy	commit	recommended	Checks every nginx file for mistakes that expose a server: request forgery, path traversal through alias, header injection, and a disclosed version.
nginx/config-test	push	recommended	Runs nginx -t on each main file inside the image, with a throwaway certificate and resolved upstream names. Records every file that nginx parsed.

Settings

Setting	What it sets
tools.nginx.image	The image nginx -t runs in; name the one the deployment uses.

Selected when

gspot selects it in a scope with file paths **/nginx.conf, **/nginx/**/*.conf.

Rules for coding agents

Rule file	Installed when
.gspot/configurations/infrastructure/nginx/rules/NGINX.md	Always

Tools and versions

Tool	Version
gixy	0.2.53
docker	Any, install it yourself
openssl	Any, install it yourself

Files gspot writes

gspot writes .gspot/configurations/infrastructure/nginx/gixy.cfg.