Nginx配置详解

Nginx配置详解

#重载配置命令(在Nginx目录下执行)
sbin/nginx -s reload

server块配置

server {
        # 监听80端口
        listen       80;
        listen  [::]:80;
        # 匹配域名、IP等信息
        server_name  www.kongbai121.xyz;
        # 将所有请求重定向至443端口（ssl）
        rewrite ^(.*)$ https://${server_name}$1 permanent;
}

server {
        # 监听443端口以及https
        listen       443 ssl;
        # 匹配域名、IP等信息
        server_name  www.kongbai121.xyz;

        # ssl证书名称（需要将文件放置到Nginx的conf目录）
        ssl_certificate      1_www.kongbai121.xyz_bundle.crt;
        # ssl证书秘钥名称（需要将文件放置到Nginx的conf目录）
        ssl_certificate_key  2_www.kongbai121.xyz.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            # 反向代理以及设置一些请求头信息给转发后的请求
            # 同下
            proxy_pass http://localhost:18090/;
            proxy_set_header HOST $host;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }


        location /drawing-bed-api/ {
            # 反向代理
            # 将www.kongbai121.xyz/drawing-bed-api/...的所有请求转发至 http://localhost:7878/
            # 这里可配负载均衡
            proxy_pass http://localhost:7878/;
        }

        location /html/ {
            # 同下
            # 实体文件目录 请求www.kongbai121.xyz/html/...将访问到/mydata/html/下的文件
            alias /mydata/html/;
            # 允许所有IP访问
            allow all;
            # 首页
            index  index.html index.htm;
        }

        location /drawing-bed/ {
            alias   /drawing-bed/images/;
            allow all;
            # 显示目录
            autoindex on;
            # 显示文件大小
            autoindex_exact_size on;
            # 显示文件时间
            autoindex_localtime on;
        }
}

整体配置

# 主机用户
user  www www;
worker_processes auto;
error_log  /www/wwwlogs/nginx_error.log  crit;
pid        /www/server/nginx/logs/nginx.pid;
worker_rlimit_nofile 51200;

events
    {
        use epoll;
        worker_connections 51200;
        multi_accept on;
    }

http
    {
    	# 引入其他配置
        include       mime.types;
		#include luawaf.conf;

		include proxy.conf;

        default_type  application/octet-stream;

        server_names_hash_bucket_size 512;
        client_header_buffer_size 32k;
        large_client_header_buffers 4 32k;
        client_max_body_size 50m;

        sendfile   on;
        tcp_nopush on;

        keepalive_timeout 60;

        tcp_nodelay on;

        fastcgi_connect_timeout 300;
        fastcgi_send_timeout 300;
        fastcgi_read_timeout 300;
        fastcgi_buffer_size 64k;
        fastcgi_buffers 4 64k;
        fastcgi_busy_buffers_size 128k;
        fastcgi_temp_file_write_size 256k;
		fastcgi_intercept_errors on;

        gzip on;
        gzip_min_length  1k;
        gzip_buffers     4 16k;
        gzip_http_version 1.1;
        gzip_comp_level 2;
        gzip_types     text/plain application/javascript application/x-javascript text/javascript text/css application/xml;
        gzip_vary on;
        gzip_proxied   expired no-cache no-store private auth;
        gzip_disable   "MSIE [1-6]\.";

        limit_conn_zone $binary_remote_addr zone=perip:10m;
		limit_conn_zone $server_name zone=perserver:10m;

        server_tokens off;
        access_log off;

    server {
            # 监听80端口
            listen       80;
            listen  [::]:80;
            # 匹配域名、IP等信息
            server_name  www.kongbai121.xyz;
            # 将所有请求重定向至443端口（ssl）
            rewrite ^(.*)$ https://${server_name}$1 permanent;
    }

    server {
            # 监听443端口
            listen       443 ssl;
            # 匹配域名、IP等信息
            server_name  www.kongbai121.xyz;

            # ssl证书名称（需要将文件放置到Nginx的conf目录）
            ssl_certificate      1_www.kongbai121.xyz_bundle.crt;
            # ssl证书秘钥名称（需要将文件放置到Nginx的conf目录）
            ssl_certificate_key  2_www.kongbai121.xyz.key;

            ssl_session_cache    shared:SSL:1m;
            ssl_session_timeout  5m;

            ssl_ciphers  HIGH:!aNULL:!MD5;
            ssl_prefer_server_ciphers  on;

            location / {
              # 反向代理以及设置一些请求头信息给转发后的请求
              # 同下
              proxy_pass http://localhost:18090/;
              proxy_set_header HOST $host;
              proxy_set_header X-Forwarded-Proto $scheme;
              proxy_set_header X-Real-IP $remote_addr;
              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            }


            location /drawing-bed-api/ {
              # 反向代理
              # 将www.kongbai121.xyz/drawing-bed-api/...的所有请求转发至 http://localhost:7878/
              # 这里可配负载均衡
              proxy_pass http://localhost:7878/;
            }

            location /html/ {
              # 同下
              # 实体文件目录 请求www.kongbai121.xyz/html/...将访问到/mydata/html/下的文件
              alias /mydata/html/;
              # 允许所有IP访问
              allow all;
              # 首页
              index  index.html index.htm;
            }

            location /drawing-bed/ {
              alias   /drawing-bed/images/;
              allow all;
              # 显示目录
              autoindex on;
              # 显示文件大小
              autoindex_exact_size on;
              # 显示文件时间
              autoindex_localtime on;
            }
    }
	# 导入其他目录的*.conf配置
	include /www/server/panel/vhost/nginx/*.conf;
}