nginx のインストールと使用に関する簡単な分析 (コレクション)

$ sudo yum install yum-utils -y #手动写入rpm源 # 在 /etc/yum.repos.d/nginx.repo 写入如下内容 [nginx-stable] name=nginx stable repo baseurl=http://nginx.org/packages/centos/$releasever/$basearch/ gpgcheck=1 enabled=1 gpgkey=https://nginx.org/keys/nginx_signing.key [nginx-mainline] name=nginx mainline repo baseurl=http://nginx.org/packages/mainline/centos/$releasever/$basearch/ gpgcheck=1 enabled=0 gpgkey=https://nginx.org/keys/nginx_signing.key $ sudo yum-config-manager --enable nginx-mainline $ sudo yum install nginx -y

server { listen 80 default_server; listen [::]:80 default_server; server_name chuchur.com www.chuchur.com; #/rest/ 开头的转到7002 location /rest/ { proxy_pass http://127.0.0.1:7002/; proxy_redirect off; proxy_set_header HOST $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_send_timeout 300; proxy_read_timeout 300; } #其他的转发到7001 location / { proxy_pass http://127.0.0.1:7001; proxy_redirect off; proxy_set_header HOST $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_send_timeout 300; proxy_read_timeout 300; } }

#gzip on upstream node_server{ server 192.168.0.1:8001 weight=10; server 192.168.0.2:8001 weight=20; } server{ listen 80; server_name localhost; location /{ proxy_pass http://node_server; root html; index index.html index.htm; } }

# 1. 配置 http ##cache## proxy_connect_timeout 500; #跟后端服务器连接的超时时间_发起握手等候响应超时时间 proxy_read_timeout 600; #连接成功后_等候后端服务器响应的时间_其实已经进入后端的排队之中等候处理 proxy_send_timeout 500; #后端服务器数据回传时间_就是在规定时间内后端服务器必须传完所有数据 proxy_buffer_size 128k; #代理请求缓存区_这个缓存区间会保存用户的头信息以供Nginx进行规则处理_一般只要能保存下头信息即可 proxy_buffers 4 128k; #同上 告诉Nginx保存单个用的几个Buffer最大用多大空间 proxy_busy_buffers_size 256k; #如果系统很忙的时候可以申请更大的proxy_buffers 官方推荐*2 proxy_temp_file_write_size 128k; #proxy缓存临时文件的大小 proxy_temp_path /usr/local/nginx/temp; #用于指定本地目录来缓冲较大的代理请求 proxy_cache_path /usr/local/nginx/cache levels=1:2 keys_zone=cache_one:200m inactive=1d max_size=30g; #设置web缓存区名为cache_one,内存缓存空间大小为200M，自动清除超过1天没有被访问过的缓存数据，硬盘缓存空间大小30g include /etc/nginx/conf.d/*.conf; # 2.location上添加缓存 #静态数据保存时效 location ~ \.html$ { proxy_pass https://www.chuchur.com; proxy_redirect off; proxy_cache cache_one; #此处的cache_one必须于上一步配置的缓存区域名称相同 proxy_cache_valid 200 304 12h; proxy_cache_valid 301 302 1d; proxy_cache_valid any 1m; #不同的请求设置不同的缓存时效 proxy_cache_key $uri$is_args$args; #生产缓存文件的key，通过4个string变量结合生成 expires 30d; #其余类型的缓存时效为30天 proxy_set_header X-Forwarded-Proto $scheme; } #图片等资源缓存30天 location ~ \.(gif|jpg|jpeg|png|bmp|ico)$ { root /var/www/img/; expires 30d; #支持 时(h)分(s)秒(m) } #视频媒体资源永久缓存 location ~ \.(wma|wmv|asf|mp3|mmf|zip|rar|swf|flv)$ { root /var/www/upload/; expires max; #禁止缓存，每次都从服务器请求 #add_header Cache-Control no-store; }

location ~ /purge(/.*) { #删除指定缓存区域cache_one的特定缓存文件$1$is_args$args proxy_cache_purge cache_one $1$is_args$args; #运行本机和10.0.217.0网段的机器访问，拒绝其它所有 allow 127.0.0.1; allow 10.0.217.0/24; deny all; }

location /ws/ { proxy_set_header Host $host; proxy_http_version 1.1; #必须 proxy_set_header Upgrade $http_upgrade;#必须 proxy_set_header Connection "upgrade";#必须 proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; ........ }

location ~* \.(gif|jpg|png|jpeg)$ { expires 30d; valid_referers none blocke *.chuchur.com www.chuchur.com m.chuchur.com *.baidu.com *.google.com; if ($invalid_referer) { rewrite ^/ https://chuchur.cn/404.jpg; } }

server { listen 80 default_server; listen [::]:80 default_server; server_name chuchur.com www.chuchur.com; location / { root ~/www/html; index index.html; try_files $uri $uri/ /index.html; } }

application/octet-stream eot; application/font-sfnt ttf; application/font-otf otf; application/font-woff2 woff2; application/font-woff woff;

location ~* .(eot|ttf|woff|svg|otf)$ { add_header Access-Control-Allow-Origin *; }

#将Nginx的配置文件中的server_tokens选项值设置为off，如没有该配置项，加上即可。 vim /usr/local/nginx/conf/nginx.conf ........... #省略内容 http { include mime.types; default_type application/octet-stream; server_tokens off; #关闭版本号 ............ #省略内容

nginx -t #检查查看配置文件路径,其配置是否正确 nginx -s reload # 重启 nginx -s quit #退出 ningx -s stop #停止

[error] 17823#17823: *21 open() "/var/www/html/index.html" failed (13: Permission denied), client: 101.228.94.31, server: _

# user nginx; user root; ##root权限或其他 worker_processes auto; pid /run/nginx.pid;

#proxy_set_header Host $host #注释掉这句

proxy_set_header Host $http_host; proxy_set_header X-Forward-For $remote_addr;

proxy_pass_request_body off; fastcgi_pass_request_body off; uwsgi_pass_request_body off #or scgi_pass_request_body off

sudo systemctl enable nginx.service sudo systemctl start nginx.service sudo systemctl status nginx.service