vlambda博客
学习文章列表

yum install -y pcre-devel openssl-devel #用本地yum仓库安装依赖包#wget -q http://nginx.org/download/nginx-1.10.2.tar.gz #下载软件源码包useradd -s /sbin/nologin -M www #创建程序用户tar xf nginx-1.10.2.tar.gz -C /usr/src/ #解压缩cd /usr/src/nginx-1.10.2./configure --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module #预配置make && make install #编译和安装ln -s /usr/local/nginx/sbin/* /usr/local/sbin/ #给命令做软连接，以便PATH能找到/usr/local/nginx/sbin/nginx #启动nginx

ping 10.0.0.8排除物理线路问题影响

telnet 10.0.0.8 80排除防火墙等得影响

wget 10.0.0.8(curl -I 10.0.0.8)模拟用户访问，排除http服务自身问题，根据输出在排错

[root@chensiqi conf]# egrep -v "#|^$" nginx.conf #去掉包含#号和空行的内容worker_processes 1; #worker进程的数量error_log logs/error.log; #错误日志（默认没开）pid logs/nginx.pid; #进程号（默认没开）events { #事件区块开始 worker_connections 1024; #每个worker进程支持的最大连接数} #事件区块结束http { #http区块开始 include mime.types; #Nginx支持的媒体类型库文件包含 default_type application/octet-stream; #默认的媒体类型 sendfile on; #开启高效传输模式 keepalive_timeout 65; #连接超时。 server { #网站配置区域（第一个server第一个虚拟主机站点） listen 80; #提供服务的端口，默认80 server_name www.chensiqi.org; #提供服务的域名主机名 location / { #第一个Location区块开始 root html; #站点的根目录（相对于nginx安装路径） index index.html index.htm; #默认的首页文件，多个用空格分开 } error_page 500 502 503 504 /50x.html; #出现对应的http状态码时，使用50x.html回应客户 location = /50x.html { #Location区块开始，访问50x.html root html; #指定对应的站点目录为html } } server { #网站配置区域（第二个server第二个虚拟主机站点） listen 80; #提供服务的端口，默认80 server_name bbs.chensiqi.org; #提供服务的域名主机名 location / { #服务区块 root html; #相对路径（nginx安装路径） index index.html index.htm; } location = /50x.html { #发生错误访问的页面 root html; } }}

整个nginx配置文件的核心框架如下：worker_processes 1;events {
 worker_connections 1024;
}http { include mime.types; server { listen 80; server_name localhost; location / { root html; index index.html index.htm; } }}

[root@localhost conf]# cat fastcgi_params
fastcgi_param QUERY_STRING $query_string;fastcgi_param REQUEST_METHOD $request_method;fastcgi_param CONTENT_TYPE $content_type;fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;fastcgi_param REQUEST_URI $request_uri;fastcgi_param DOCUMENT_URI $document_uri;fastcgi_param DOCUMENT_ROOT $document_root;fastcgi_param SERVER_PROTOCOL $server_protocol;fastcgi_param REQUEST_SCHEME $scheme;fastcgi_param HTTPS $https if_not_empty;
fastcgi_param GATEWAY_INTERFACE CGI/1.1;fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param REMOTE_ADDR $remote_addr;fastcgi_param REMOTE_PORT $remote_port;fastcgi_param SERVER_ADDR $server_addr;fastcgi_param SERVER_PORT $server_port;fastcgi_param SERVER_NAME $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirectfastcgi_param REDIRECT_STATUS 200;

[root@localhost conf]# pwd/application/nginx/conf[root@localhost conf]# egrep -v "#|^$" nginx.conf.default >nginx.conf

worker_processes 1;events { worker_connections 1024;}http { include mime.types; default_type application/octet-stream; sendfile on; keepalive_timeout 65; server { listen 80; server_name localhost; location / { root html/www; index index.html index.htm; } }}

[root@localhost conf]# /application/nginx/sbin/nginx -tnginx: the configuration file /application/nginx-1.10.2//conf/nginx.conf syntax is oknginx: configuration file /application/nginx-1.10.2//conf/nginx.conf test is successful

[root@localhost html]# cd /application/nginx/html/[root@localhost html]# ls50x.html index.html #原本的网页文件[root@localhost html]# mkdir www #创建一个目录叫做www[root@localhost html]# echo "I am www" > www/index.html #写入网页文件[root@localhost html]# cat www/index.html #查看一下I am www[root@localhost html]# curl 192.168.0.100 #测试链接I am www

[root@localhost html]# ls50x.html index.html www[root@localhost html]# mkdir bbs[root@localhost html]# echo "I am bbs" > bbs/index.html

[root@localhost html]# curl 192.168.0.100I am www[root@localhost html]# curl 192.168.0.100I am www[root@localhost html]# curl 192.168.0.100I am www[root@localhost html]# curl 192.168.0.100I am www

[root@localhost html]# echo "192.168.0.100 www.chensiqi.com bbs.chensiqi.com" >> /etc/hosts[root@localhost html]# tail -1 /etc/hosts192.168.0.100 www.chensiqi.com bbs.chensiqi.com

[root@localhost html]# curl www.chensiqi.comI am www[root@localhost html]# curl www.chensiqi.comI am www[root@localhost html]# curl bbs.chensiqi.comI am bbs[root@localhost html]# curl bbs.chensiqi.comI am bbs

worker_processes 1;events { worker_connections 1024;}http { include mime.types; default_type application/octet-stream; sendfile on; keepalive_timeout 65; include extra/www.conf; #虚拟网站配置信息统一放在了当前的extra目录下 include extra/mail.conf; include extra/status.conf;
}

[root@localhost nginx]# tree conf/extra/conf/extra/├── mail.conf├── status.conf└── www.conf
0 directories, 3 files[root@localhost nginx]# cat conf/extra/www.conf  server { listen 80; server_name www.yunjisuan.com; location / { root /var/www/html/wwwcom; index index.html index.htm; } error_page 500 502 503 504 /50x.html; location = /50x.html { root /var/www/html; } }

root@localhost nginx]# /usr/local/nginx/sbin/nginx -Vnginx version: nginx/1.10.2built by gcc 4.4.7 20120313 (Red Hat 4.4.7-4) (GCC) built with OpenSSL 1.0.1e-fips 11 Feb 2013TLS SNI support enabledconfigure arguments: --user=www --group=www --prefix=/usr/local/nginx-1.10.2/ --with-http_stub_status_module --with-http_ssl_module
##说明--with-http_stub_status_module模块就是状态信息模块

[root@localhost nginx]# cat conf/extra/status.conf ##status

server{
 listen 80; server_name status.yunjisuan.com; location / { stub_status on; #开启状态信息功能 access_log off; #不记录访问日志
 }}  

[root@localhost nginx]# curl status.yunjisuan.comActive connections: 2 #表示Nginx正在处理的活动连接2个server accepts handled requests 39 39 41 Reading: 0 Writing: 1 Waiting: 1 

范例：error_log file level;

worker_processes 1;error_log logs/error.log; #非常简单，一般增加此行即可events { worker_connections 1024;}http { include mime.types; default_type application/octet-stream; sendfile on; keepalive_timeout 65; include extra/www.conf; include extra/mail.conf; include extra/status.conf;
}

[root@localhost nginx]# cat /server/scripts/cut_nginx_log.sh #!/bin/bash#日志切割脚本可挂定时任务，每天00点整执行
Dateformat=`date +%Y%m%d`Basedir="/usr/local/nginx"Nginxlogdir="$Basedir/logs"Logname="access"
[ -d $Nginxlogdir ] && cd $Nginxlogdir || exit 1[ -f ${Logname}.log ] || exit 1/bin/mv ${Logname}.log ${Dateformat}_${Logname}.log$Basedir/sbin/nginx -s reload
[root@localhost nginx]# cat >>/var/spool/cron/root << KOF#cut nginx access log by Mr.chen00 00 * * * /bin/bash /server/scripts/cut_nginx_log.sh >/dev/null 2>&1

location [ = | ~ | ~* | ^~ ] uri {
 ...
}

[root@localhost nginx]# cat /usr/local/nginx/conf/extra/www.conf server { listen 80; server_name www.yunjisuan.com; root /var/www/html/wwwcom; location / { return 401;  } location = / { return 402; } location = /images/ { return 501; } location /documents/ { return 403; } location ^~ /images/ { return 404; } location ~* \.(gif|jpg|jpeg)$ { return 500; }
 }

[root@localhost nginx]# curl -s -o /dev/null -w "%{http_code}\n" www.yunjisuan.com402 #匹配了=的情况[root@localhost nginx]# curl -s -o /dev/null -w "%{http_code}\n" www.yunjisuan.com/402 #匹配了=的情况[root@localhost nginx]# curl -s -o /dev/null -w "%{http_code}\n" www.yunjisuan.com/xxxx401 #匹配不到默认匹配 ／的情况[root@localhost nginx]# curl -s -o /dev/null -w "%{http_code}\n" www.yunjisuan.com/documents/403 #匹配字符串[root@localhost nginx]# curl -s -o /dev/null -w "%{http_code}\n" www.yunjisuan.com/images/501 #优先匹配=的情况[root@localhost nginx]# curl -s -o /dev/null -w "%{http_code}\n" www.yunjisuan.com/images/1.jpg404 #匹配[root@localhost nginx]# curl -s -o /dev/null -w "%{http_code}\n" www.yunjisuan.com/documents/images/1.jpg500 #匹配～*的情况

指令语法：rewrite regex replacement 【flag】；

默认值：none

应用位置：server，location，if

rewrite ^/(.*) http://www.baidu.com/$1 permanent;

[root@localhost nginx]# cat conf/extra/www.conf #www virtualhost by Mr.chen  server { listen 80; server_name www.yunjisuan.com; root /var/www/html/wwwcom; location / { index index.html index.htm; }# location = / {# return 402;# } location = /images/ { return 501; } location /documents/ { return 403; } location ^~ /images/ { return 404; } location ~* \.(gif|jpg|jpeg)$ { return 500; }
 }
 server{ listen 80; server_name yunjisuan.com; rewrite ^/(.*) http://www.yunjisuan.com/$1 permanent; #当用户访问yunjisuan.com及下面的任意内容时，都会通过这条rewrite跳转到www.yunjisuan.com对应的地址 }

[root@localhost nginx]# cat conf/extra/mail.conf  server { listen 80; server_name mail.yunjisuan.com; location / { root /var/www/html/mailcom; index index.html index.htm; } if ( $http_host ~* "^(.*)\.yunjisuan\.com$") { set $domain $1; rewrite ^(.*) http://www.yunjisuan.com/$domain/yunjisuan.html break;
 }}

[root@localhost ~]# which htpasswd[root@localhost ~]# htpasswd -bc /usr/local/nginx/conf/htpasswd yunjisuan 123123Adding password for user yunjisuan [root@localhost ~]# cat /usr/local/nginx/conf/htpasswd yunjisuan:FC1/eEc/iK0Mo #账号密码是加密的（htpasswd是文件的名字）
6.7.2 在虚拟主机配置文件里加入两条配置信息[root@localhost html]# cat /usr/local/nginx/conf/extra/blog.conf  server { listen 80; server_name blog.yunjisuan.com; location / { root /var/www/html/blogcom; index index.html index.htm; auth_basic "yunjisuan training"; #加入这条配置 auth_basic_user_file /usr/local/nginx/conf/htpasswd; #加入这条配置 } }

#配置解释：
auth_basic :验证的基本信息选项（后边跟着的双引号里就是验证窗口的名字）auth_basic_user_file ：验证的用户文件（后边根账号密码文件的绝对路径）

index index.php index.html index.htm;