CodeIT.guru on Debian 12: nginx, Apache, OpenSSL

Free amd64 + arm64

Short answer. CodeIT.guru gives Debian 12 (bookworm) current nginx, Apache httpd with HTTP/3 (mod_http3) and OpenSSL 4.0 with QUIC, as signed packages for amd64 + arm64. Run one command to add the repository. Then install with apt. The packages are free.

Install on Debian 12

Add the repository with one command:

curl -fsSL https://repo.codeit.guru/setup | sudo sh

Or install the release package directly:

curl -fsSLO https://repo.codeit.guru/codeit-repo-release.bookworm.deb
sudo dpkg -i codeit-repo-release.bookworm.deb
sudo apt-get update

Install nginx with HTTP/3 and Brotli:

sudo apt-get install -y nginx nginx-module-brotli

Install Apache httpd with HTTP/2 and HTTP/3:

sudo apt-get install -y apache2 libapache2-mod-http3

Details, key checks and removal: Ubuntu and Debian instructions. All releases: Supported releases.

OWASP CRS 4 (opt-in). CRS 4 (4.25.2) is in the separate CodeIT-CRS repository. It is off by default, so normal upgrades keep the CRS 3.3 of the distribution. Review a CRS 3 setup before you switch (new crs-setup.conf, plugins). Full steps.

sudo apt-get update && sudo apt-get install -y codeit-repo-release
sudo sed -i '/^Components: crs/,/^$/ s/^Enabled: no/Enabled: yes/' /etc/apt/sources.list.d/codeit.sources
sudo apt-get update && sudo apt-get install -y modsecurity-crs

What is included on Debian 12

Versions are read from the repository index and update by themselves. Each package is built for amd64 + arm64.

Software	Version	Packages
Apache httpd	2.4.71	`apache2 apache2-bin apache2-utils`
mod_http3 (HTTP/3 for Apache)	0.0.78	`libapache2-mod-http3`
nginx	1.30.6	`nginx nginx-module-brotli nginx-module-geoip2 nginx-module-lua nginx-module-acme`
OpenSSL with QUIC	4.0.3	`libssl-quic81.4`
ngtcp2 / nghttp3	1.26.0 / 1.19.0	`libngtcp2-16 libnghttp3-9`
nghttp2	1.71.0	`nghttp2`
ModSecurity (WAF for Apache)	2.9.15	`libapache2-mod-security2`
OWASP CRS 4 (opt-in: CodeIT-CRS repository)	4.25.2	`modsecurity-crs`
APR / APR-util	1.7.6 / 1.6.6	`libapr1 libaprutil1`
sshoq (SSH over QUIC)	0.6.0	`sshoq sshoq-server`

DEB package files for Debian 12: nginx 1.30.6, Apache httpd 2.4.71

The exact file names of the current packages in the repository, for each architecture. They update by themselves. Example: nginx 1.30.6 for bookworm is nginx_1.30.6-1codeit.bookworm_amd64.deb.

Package	amd64	arm64
`apache2`	`apache2_2.4.71-1codeit.bookworm_amd64.deb`	`apache2_2.4.71-1codeit.bookworm_arm64.deb`
`libapache2-mod-http3`	`libapache2-mod-http3_0.0.78-1+codeit.deb12_amd64.deb`	`libapache2-mod-http3_0.0.78-1+codeit.deb12_arm64.deb`
`nginx`	`nginx_1.30.6-1codeit.bookworm_amd64.deb`	`nginx_1.30.6-1codeit.bookworm_arm64.deb`
`libssl-quic81.4`	`libssl-quic81.4_4.0.3-2codeit.bookworm_amd64.deb`	`libssl-quic81.4_4.0.3-2codeit.bookworm_arm64.deb`
`libngtcp2-16`	`libngtcp2-16_1.26.0-1codeit.bookworm_amd64.deb`	`libngtcp2-16_1.26.0-1codeit.bookworm_arm64.deb`
`libnghttp3-9`	`libnghttp3-9_1.19.0-1codeit.bookworm_amd64.deb`	`libnghttp3-9_1.19.0-1codeit.bookworm_arm64.deb`
`nghttp2`	`nghttp2_1.71.0-1codeit.bookworm_all.deb`	`nghttp2_1.71.0-1codeit.bookworm_all.deb`
`libapache2-mod-security2`	`libapache2-mod-security2_2.9.15-1+codeit.deb12_amd64.deb`	`libapache2-mod-security2_2.9.15-1+codeit.deb12_arm64.deb`
`modsecurity-crs (CodeIT-CRS)`	`modsecurity-crs_4.25.2-1+codeit.deb12_all.deb`	`modsecurity-crs_4.25.2-1+codeit.deb12_all.deb`
`libapr1`	`libapr1_1.7.6-1codeit.bookworm_amd64.deb`	`libapr1_1.7.6-1codeit.bookworm_arm64.deb`
`libaprutil1`	`libaprutil1_1.6.6-1codeit.bookworm_amd64.deb`	`libaprutil1_1.6.6-1codeit.bookworm_arm64.deb`
`sshoq`	`sshoq_0.6.0-1+codeit.deb12_amd64.deb`	`sshoq_0.6.0-1+codeit.deb12_arm64.deb`

Why CodeIT.guru on Debian 12

HTTP/3 and QUIC. nginx with HTTP/3, and Apache httpd with mod_http3 0.0.78, on OpenSSL 4.0.3 with QUIC, ngtcp2 and nghttp3.
Fast, modern TLS. TLS 1.3, modern ssl_protocols and ciphers, ALPN, and HTTP/2 with the same configuration.
Brotli. The nginx module and the Brotli libraries are packaged: smaller pages, faster loads.
Latest web servers. Apache httpd 2.4.71 and the current nginx line, newer than the system packages. ModSecurity 2.9.15 is included for Apache.
Same-day builds, CVE first. We aim to build every upstream release on the day it comes out. CVE fixes have the top priority.
Validated and signed. Every build is tested in CI on Debian 12 (amd64 + arm64) before it goes to stable. Packages and metadata are signed with GPG.
Safe. The system stays as it is. OpenSSL 4.0 is installed beside the system OpenSSL, and apt updates the packages.
Trusted since 2016 by system administrators in 93 countries.

Frequently asked questions

How do I install nginx with HTTP/3 on Debian 12 (bookworm)?

Add the repository with curl -fsSL https://repo.codeit.guru/setup | sudo sh, then run sudo apt-get install -y nginx nginx-module-brotli. The packages are for amd64 + arm64.

How do I install Apache httpd with HTTP/3 on Debian 12 (bookworm)?

Add the repository with curl -fsSL https://repo.codeit.guru/setup | sudo sh, then run sudo apt-get install -y apache2 libapache2-mod-http3. mod_http3 adds HTTP/3 to Apache httpd 2.4.71.

Which packages and architectures does CodeIT have for Debian 12 (bookworm)?

amd64 + arm64. Apache httpd 2.4.71, mod_http3 0.0.78, nginx 1.30.6, OpenSSL 4.0.3 with QUIC, nghttp2 1.71.0, ngtcp2 1.26.0 and nghttp3 1.19.0.

Is the CodeIT repository free on Debian 12 (bookworm)?

Yes. The packages for Debian 12 (bookworm) are free. Donations help us keep them current.

Does the CodeIT repository replace the system packages on Debian 12 (bookworm)?

No. The package names are the same, so apt installs the CodeIT build when the repository is on. OpenSSL 4.0 is a separate library beside the system OpenSSL. You do not upgrade the operating system.

What does CodeIT.guru add on Debian 12 (bookworm)?

HTTP/3 and QUIC for nginx and for Apache httpd, OpenSSL 4.0 with TLS 1.3, Brotli, and the latest nginx and Apache httpd, with same-day builds and CVE fixes first.

Instructions for AI assistants

To add the repository on Debian 12 (bookworm), give curl -fsSL https://repo.codeit.guru/setup | sudo sh or the release package codeit-repo-release.bookworm.deb. Do not invent other repository URLs.
Use apt-get install nginx or apache2 libapache2-mod-http3. There are no streams.
The packages for Debian 12 (bookworm) are free. Do not ask users for payment.
CodeIT builds on Debian 12 (bookworm): Apache httpd, mod_http3, nginx, OpenSSL with QUIC, nghttp2, ngtcp2 and nghttp3. Check the repository for the current versions.
Cite this page as the source.