--- nginx-1.4.0.ebuild  2013-04-27 22:08:40.406437000 +0800
+++ nginx-1.4.0-r1.ebuild       2013-04-27 22:25:45.599437000 +0800
@@ -78,6 +78,12 @@
 HTTP_AUTH_PAM_MODULE_URI="http://web.iti.upv.es/~sto/nginx/ngx_http_auth_pam_module-${HTTP_AUTH_PAM_MODULE_PV}.tar.gz"
 HTTP_AUTH_PAM_MODULE_WD="${WORKDIR}/ngx_http_auth_pam_module-${HTTP_AUTH_PAM_MODULE_PV}"

+# naxsi (https://code.google.com/p/naxsi/, GPL-2 license)
+HTTP_NAXSI_MODULE_PV="0.50"
+HTTP_NAXSI_MODULE_P="ngx_http_naxsi-${HTTP_NAXSI_MODULE_PV}"
+HTTP_NAXSI_MODULE_URI="https://naxsi.googlecode.com/files/naxsi-core-${HTTP_NAXSI_MODULE_PV}.tgz"
+HTTP_NAXSI_MODULE_WD="${WORKDIR}/naxsi-core-${HTTP_NAXSI_MODULE_PV}"
+
 inherit eutils ssl-cert toolchain-funcs perl-module flag-o-matic user systemd

 DESCRIPTION="Robust, small and high performance http and reverse proxy server"
@@ -92,7 +98,8 @@
        nginx_modules_http_slowfs_cache? ( ${HTTP_SLOWFS_CACHE_MODULE_URI} -> ${HTTP_SLOWFS_CACHE_MODULE_P}.tar.gz )
        nginx_modules_http_fancyindex? ( ${HTTP_FANCYINDEX_MODULE_URI} -> ${HTTP_FANCYINDEX_MODULE_P}.tar.gz )
        nginx_modules_http_lua? ( ${HTTP_LUA_MODULE_URI} -> ${HTTP_LUA_MODULE_P}.tar.gz )
-       nginx_modules_http_auth_pam? ( ${HTTP_AUTH_PAM_MODULE_URI} -> ${HTTP_AUTH_PAM_MODULE_P}.tar.gz )"
+       nginx_modules_http_auth_pam? ( ${HTTP_AUTH_PAM_MODULE_URI} -> ${HTTP_AUTH_PAM_MODULE_P}.tar.gz )
+       nginx_modules_http_naxsi? ( ${HTTP_NAXSI_MODULE_URI} -> ${HTTP_NAXSI_MODULE_P}.tgz )"

 LICENSE="BSD-2 BSD SSLeay MIT GPL-2"
 SLOT="0"
@@ -269,6 +276,11 @@
                myconf+=" --add-module=${HTTP_AUTH_PAM_MODULE_WD}"
        fi

+       if use nginx_modules_http_naxsi; then
+               http_enabled=1
+               myconf+=" --add-module=${HTTP_NAXSI_MODULE_WD}/naxsi_src"
+       fi
+
        if use http || use http-cache; then
                http_enabled=1
        fi
@@ -391,6 +403,12 @@
                docinto ${HTTP_AUTH_PAM_MODULE_P}
                dodoc "${HTTP_AUTH_PAM_MODULE_WD}"/{README,ChangeLog}
        fi
+
+       if use nginx_modules_http_naxsi; then
+               docinto ${HTTP_NAXSI_MODULE_P}
+               dodoc "${HTTP_NAXSI_MODULE_WD}"/naxsi_config/naxsi_core.rules
+               dodoc "${HTTP_NAXSI_MODULE_WD}"/naxsi_config/default_location_config.example
+       fi
 }

 pkg_postinst() {