Nginx配置文档

配置文档

nginx.conf

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
# 全局配置
user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

# 处理网络配置
events {
        worker_connections 768;
        # multi_accept on;
        # 代理参数
        #proxy_connect_timeout 6s;  # 连接超时时间
        #proxy_send_timeout 10s;    #发送超时时间
        #proxy_read_timeout 10s;    #接收超时时间
        #proxy_buffer_size 16k;   #缓冲区大小
        #proxy_buffer 4 32k;    #缓冲区个数和大小
        #proxy_busy_buffers_size 64k;  #忙碌缓冲区大小
        #proxy_temp_file_write_size 64k;  #代理临时文件写入大小
}

# 核心模块配置
http {
        ##
        # Basic Settings
        ##

        sendfile on;
        tcp_nopush on;
        types_hash_max_size 2048;
        # server_tokens off;

        # server_names_hash_bucket_size 64;
        # server_name_in_redirect off;

		# 外部配置文件引用
        include /etc/nginx/mime.types;
        default_type application/octet-stream;
        
        ##
        # SSL Settings   SSL证书配置
        ##

        #.ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
        #ssl_prefer_server_ciphers on;
        ssl_certificate charlee.top_bundle.crt;
        ssl_certificate_key charlee.top.key;


        ##
        # Logging Settings
        ##

        access_log /var/log/nginx/access.log;
        error_log /var/log/nginx/error.log;
        
        ##
        # Gzip Settings
        ##

        gzip on;

        # gzip_vary on;
        # gzip_proxied any;
        # gzip_comp_level 6;
        # gzip_buffers 16 8k;
        # gzip_http_version 1.1;
        # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

        ##
        # Virtual Host Configs   虚拟主机配置
        ##

		# 引用外部配置文件
        include /etc/nginx/conf.d/*.conf;
        include /etc/nginx/sites-enabled/*;
	
		# 配置应用
        server {
                listen 80;
                #SSL 默认访问端口号为 443
                listen 443 ssl;
                server_name charlee.top;   #域名
                #请填写证书文件的相对路径或绝对路径
                ssl_certificate /home/ubuntu/charlee.top_nginx/charlee.top_bundle.crt;
                #请填写私钥文件的相对路径或绝对路径
                ssl_certificate_key /home/ubuntu/charlee.top_nginx/charlee.top.key;
                ssl_session_timeout 5m;
                #请按照以下协议配置
                ssl_protocols TLSv1.2 TLSv1.3;
                #请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
                ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
                ssl_prefer_server_ciphers on;

                # 配置代理路径
                location / {
                        #proxy_pass http://124.220.149.229:8080;
                        proxy_pass http://charlee.top:3000;
                        proxy_set_header            Host $host;
                        proxy_set_header            X-real-ip $remote_addr;
                        proxy_set_header            X-Forwarded-For $proxy_add_x_forwarded_for;
                }

        }
        
        server {
                listen 3000;
                server_name charlee.top;
        }
}

常用指令

命令 含义
nginx 启动
nginx -V 查看当前版本及编译配置信息
nginx -t 检查配置文件语法是否正确
nginx -s stop 直接关闭worker子进程
nginx -s quit 等待worker子进程正确处理完请求后关闭
nginx -s reload 重读配置文件（主要在修改配置文件后使配置文件生效）

常用场景

  1. 虚拟主机

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    server{
    	# 1、基于多IP
        listen 80;
        server_name 168.192.0.1;
       
        listen 80;
        server_name 168.192.0.2;
        
        # 2、基于多端口
        listen 8000;
        server_name 168.192.0.1;
        
        listen 8080;
        server_name 168.192.0.1;
        # 3、基于不同域名
        listen 80;
        server_name www.baidu.com;
        
        listen 80;
        server_name www.chat.io;
    }

  2. 静态站点

    image-20230626001233430

1
# 主要将静态资源交给nginx解析，加快用户访问速度，如Vue纯前端项目、JPG图片等
  1. 反向代理（nginx核心）

image-20230626001714359

  1. 七层反向代理

    1
    2
    3
    4
    5
    6
    7
    8
    9
    # 将本地8000端口代理到百度
    server {
        listen 8000；
        server_name localhost;
        
        location / {
            proxy_pass https://baidu.com;
        }
    }

  2. 四层反向代理

    1
    2
    3
    4
    5
    6
    stream{
        server{
            listen 3306；
            # 访问本机的3306端口代理到了远程服务器的33060端口
            proxy_pass 192.168.8.1:33060;
    }

  3. 负载均衡