openresty: 1.19.9 -> 1.21.4

pkgs/servers/http/nginx/generic.nix

@@ -18,9 +18,11 @@ outer@{ lib, stdenv, fetchurl, fetchpatch, openssl, zlib, pcre, libxml2, libxslt
 , src ? null # defaults to upstream nginx ${version}
 , sha256 ? null # when not specifying src
 , configureFlags ? []
+, nativeBuildInputs ? []
 , buildInputs ? []
 , extraPatches ? []
 , fixPatch ? p: p
+, postPatch ? ""
 , preConfigure ? ""
 , postInstall ? ""
 , meta ? null
@@ -48,9 +50,7 @@ assert assertMsg (unique moduleNames == moduleNames)
   "nginx: duplicate modules: ${concatStringsSep ", " moduleNames}. A common cause for this is that services.nginx.additionalModules adds a module which the nixos module itself already adds.";
 
 stdenv.mkDerivation {
-  inherit pname;
-  inherit version;
-  inherit nginxVersion;
+  inherit pname version nginxVersion;
 
   outputs = ["out" "doc"];
 
@@ -59,6 +59,9 @@ stdenv.mkDerivation {
     inherit sha256;
   };
 
+  nativeBuildInputs = [ removeReferencesTo ]
+    ++ nativeBuildInputs;
+
   buildInputs = [ openssl zlib pcre libxml2 libxslt gd geoip perl ]
     ++ buildInputs
     ++ mapModules "inputs";
@@ -155,6 +158,8 @@ stdenv.mkDerivation {
   ] ++ mapModules "patches")
     ++ extraPatches;
 
+  inherit postPatch;
+
   hardeningEnable = optional (!stdenv.isDarwin) "pie";
 
   enableParallelBuilding = true;
@@ -164,8 +169,6 @@ stdenv.mkDerivation {
     cp -r ${nginx-doc}/* $doc
   '';
 
-  nativeBuildInputs = [ removeReferencesTo ];
-
   disallowedReferences = map (m: m.src) modules;
 
   postInstall =

pkgs/servers/http/openresty/default.nix

@@ -2,6 +2,7 @@
 , runCommand
 , lib
 , fetchurl
+, perl
 , postgresql
 , nixosTests
 , ...
@@ -9,17 +10,17 @@
 
 callPackage ../nginx/generic.nix args rec {
   pname = "openresty";
-  nginxVersion = "1.19.9";
+  nginxVersion = "1.21.4";
   version = "${nginxVersion}.1";
 
   src = fetchurl {
     url = "https://openresty.org/download/openresty-${version}.tar.gz";
-    sha256 = "1xn1d0x2y63z0mi0qq3js6lz6ziba92r7vyyfkj1qc738vjz8vsp";
+    sha256 = "sha256-DFCTtk94IehQZcmeXU5swxggz9fze5oN7IQgnYeir5k=";
   };
 
-  # generic.nix applies fixPatch on top of every patch defined there.  This
-  # allows updating the patch destination, as openresty has nginx source code
-  # in a different folder.
+  # generic.nix applies fixPatch on top of every patch defined there.
+  # This allows updating the patch destination, as openresty has
+  # nginx source code in a different folder.
   fixPatch = patch:
     let name = patch.name or (builtins.baseNameOf patch); in
     runCommand "openresty-${name}" { src = patch; } ''
@@ -28,14 +29,16 @@ callPackage ../nginx/generic.nix args rec {
         --replace "b/" "b/bundle/nginx-${nginxVersion}/"
     '';
 
+  nativeBuildInputs = [ perl ];
+
   buildInputs = [ postgresql ];
 
-  configureFlags = [ "--with-http_postgres_module" ];
-
-  preConfigure = ''
-    patchShebangs .
+  postPatch = ''
+    patchShebangs configure bundle/
   '';
 
+  configureFlags = [ "--with-http_postgres_module" ];
+
   postInstall = ''
     ln -s $out/luajit/bin/luajit-2.1.0-beta3 $out/bin/luajit-openresty
     ln -s $out/nginx/sbin/nginx $out/bin/nginx