Noteworthy Changes Wheezy => Jessie
* Disabled SSLv3 by default
After POODLE we followed suit and disabled SSLv3 by default.
* /var/log/nginx permissions
/var/log/nginx/ is now not readable by default (www-data:adm 750),
If you depend on that you can add a manual override with dpkg-statoverride.
* New upgrade & rotate initscript commands
You can now upgrade the nginx binary on the fly with /etc/init.d/nginx upgrade
(Read more on http://nginx.org/en/docs/control.html#upgrade)
* Synced configuration files are with upstream
Unfortunately that might break existing configuration for some users, especially
fastcgi scripts. /usr/share/doc/nginx-common/NEWS.Debian.gz contains some
more information about the changes made.
* Changed document root to /var/www/html
The default document root has now changed to /var/www/html/.
* Added a snippets directory
A /etc/nginx/snippets has been added, it contains common configuration
stangas. For now we ship a snakeoil.conf (self-signed ssl) and a simple
* Switched to graceful stop
Both systemd and the initscript's stop function try to graceful stop
nginx (SIGQUIT) before stopping it fast (SIGTERM). That allows nginx to
serve connected clients before shutting down.
* Dropped nginx-naxsi
Packaging naxsi was not trivial and, unfortunately, none of the
maintainers uses it. That's the reason nginx-naxsi was not in a good
shape and we are not feeling comfortable to release and support it.