diff --git a/extra/nginx-mainline/PKGBUILD b/extra/nginx-mainline/PKGBUILD
index 4ea10f937..32bd9ede1 100644
--- a/extra/nginx-mainline/PKGBUILD
+++ b/extra/nginx-mainline/PKGBUILD
@@ -7,11 +7,11 @@
 #  - build armv7h and aarch64 with -fPIC
 
 pkgname=nginx-mainline
-pkgver=1.11.5
+pkgver=1.11.6
 pkgrel=1
 pkgdesc='Lightweight HTTP server and IMAP/POP3 proxy server, mainline release'
 arch=('i686' 'x86_64')
-url='http://nginx.org'
+url='https://nginx.org'
 license=('custom')
 depends=('pcre' 'zlib' 'openssl' 'geoip')
 makedepends=('hardening-wrapper')
@@ -28,15 +28,16 @@ backup=('etc/nginx/fastcgi.conf'
 install=nginx.install
 provides=('nginx')
 conflicts=('nginx')
-source=($url/download/nginx-$pkgver.tar.gz
+source=($url/download/nginx-$pkgver.tar.gz{,.asc}
         service
         logrotate)
-md5sums=('db43f2b19746f6f47401c3afc3924dc6'
+validpgpkeys=('B0F4253373F8F6F510D42178520A9993A1C052F8') # Maxim Dounin <mdounin@mdounin.ru>
+md5sums=('4e29a07a7c74376fa032e5af0d1c5369'
+         'SKIP'
          'ce9a06bcaf66ec4a3c4eb59b636e0dfd'
-         '3441ce77cdd1aab6f0ab7e212698a8a7')
+         'd6a6d4d819f03a675bacdfabd25aa37e')
 
 _common_flags=(
-  --with-ipv6
   --with-pcre-jit
   --with-file-aio
   --with-http_addition_module
@@ -50,6 +51,7 @@ _common_flags=(
   --with-http_mp4_module
   --with-http_realip_module
   --with-http_secure_link_module
+  --with-http_slice_module
   --with-http_ssl_module
   --with-http_stub_status_module
   --with-http_sub_module
@@ -62,6 +64,9 @@ _common_flags=(
 )
 
 _mainline_flags=(
+  --with-stream_ssl_preread_module
+  --with-stream_geoip_module
+  --with-stream_realip_module
 )
 
 build() {
diff --git a/extra/nginx-mainline/logrotate b/extra/nginx-mainline/logrotate
index e0fa9ec4c..6fcf5581a 100644
--- a/extra/nginx-mainline/logrotate
+++ b/extra/nginx-mainline/logrotate
@@ -1,5 +1,6 @@
 /var/log/nginx/*log {
 	missingok
+	notifempty
 	create 640 http log
 	sharedscripts
 	compress