Nginx 常用配置，避坑指南！
點(diǎn)擊關(guān)注公眾號，Java干貨及時(shí)送達(dá)
安裝 Nginx
# 更新軟件包，請確保服務(wù)器的軟件包已經(jīng)是最新的。
sudo yum update -y
# 添加 Nginx 源
sudo rpm -Uvh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm
# 安裝 Nginx
sudo yum install -y nginx
# 啟動(dòng) Nginx
sudo systemctl start nginx.service
# 設(shè)置開機(jī)自啟 Nginx
sudo systemctl enable nginx.service
配置 Nginx
# 使用 vim 編輯創(chuàng)建 文件名.conf
vim /etc/nginx/conf.d/文件名.conf
添加配置1（配置1和2可以同事監(jiān)聽80端口，綁定不同域名，實(shí)現(xiàn)一臺(tái)服務(wù)器nginx同時(shí)配置多個(gè)前端網(wǎng)站，多個(gè)域名空格隔開）
server {
listen 80;
server_name 域名1 域名2 localhost;
location / {
proxy_set_header HOST $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://127.0.0.1:端口/;
}
}
添加配置2
server {
listen 80;
server_name 域名1 域名2 localhost;
location / {
proxy_set_header HOST $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://127.0.0.1:端口/;
}
}
代理靜態(tài)網(wǎng)站 root指定磁盤目錄
server {
listen 80;
server_name 域名1 域名2 多個(gè)域名空格隔開 localhost;
location / {
try_files $uri $uri/ /index.html;
root D:\test-web;
}
}
常用命令
檢查配置是否有誤
sudo nginx -t
重載/重啟 Nginx 配置
sudo nginx -s reload
查看nginx安裝目錄
ps -ef | grep nginx
錯(cuò)誤及解決辦法
不能訪問子路徑錯(cuò)誤：
location /flow {
proxy_pass http://127.0.0.1:9083/;
}
修改：
location /flow/ {
proxy_pass http://127.0.0.1:9083/;
}
解決：/flow 后面加個(gè)/
配置多個(gè)前端代碼/a/ /b/不能訪問
解決：把/a/ /b/放在根目錄下面 （就是只有一個(gè)根目錄，不過根目錄里面可以放很多項(xiàng)目文件夾）
去掉請求后面的斜杠 添加在location節(jié)點(diǎn)里面 解決瀏覽器請求拼接到接口前面的詭異問題
rewrite ^/(.*)/$ /$1 permanent;
前后端分離項(xiàng)目部署
##前端配置
location /gov_flow {
##放再nginx下的/content/gov_flow目錄
alias /var/html/gov_flow;
try_files $uri $uri/ /index.html;
index index.html;
}
##后端接口配置
location /stage-prod-api/ {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://flow:9083/;
}
location /stage-test-api/{
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://localhost:8080/;
}
#兩個(gè)后端項(xiàng)目接口合并成一個(gè) 給前端訪問9991
server {
listen 9991;
server_name localhost;
location /yqt/{
proxy_pass http://127.0.0.1:8888/yqt/;
}
location /ad/{
proxy_pass http://127.0.0.1:8090/ad/;
}
}
nginx配置ssl證書示例1
http{
#http節(jié)點(diǎn)中可以添加多個(gè)server節(jié)點(diǎn)
server{
#ssl 需要監(jiān)聽443端口
listen 443;
# CA證書對應(yīng)的域名
server_name www.ilovey.live;
# 開啟ssl
ssl on;
# 服務(wù)器證書絕對路徑
ssl_certificate /www/server/nginx/conf.d/4467149_www.ilovey.live.pem;
# 服務(wù)器端證書key絕對路徑
ssl_certificate_key /www/server/nginx/conf.d/4467149_www.ilovey.live.key;
# session超時(shí)
ssl_session_timeout 5m;
# 協(xié)議類型
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
# ssl算法列表
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
# 是否 服務(wù)器決定使用哪種算法 on/off TLSv1.1 的話需要開啟
ssl_prefer_server_ciphers on;
location ^~ /zhihao/ {
proxy_set_header Host $host;
proxy_pass http://127.0.0.1:8080/;
}
}
# 如果用戶通過 http 訪問 直接重寫 跳轉(zhuǎn)到 https 這個(gè)是一個(gè)很有必要的操作
server{
listen 80;
server_name www.ilovey.live;
rewrite ^/(.*)$ https://www.ilovey.live:443/$1 permanent;
}
}
nginx配置ssl證書示例2
server
{
listen 80;
listen 443 ssl http2;
server_name ilovey.live;
index index.php index.html index.htm default.php default.htm default.html;
root /www/wwwroot/網(wǎng)站目錄;
#SSL-START SSL相關(guān)配置，請勿刪除或修改下一行帶注釋的404規(guī)則
#error_page 404/404.html;
ssl_certificate /www/server/nginx/conf.d/4467149_www.ilovey.live.pem;
ssl_certificate_key /www/server/nginx/conf.d/4467149_www.ilovey.live.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
error_page 497 https://$host$request_uri;
#SSL-END
#ERROR-PAGE-START 錯(cuò)誤頁配置，可以注釋、刪除或修改
#error_page 404 /404.html;
#error_page 502 /502.html;
#ERROR-PAGE-END
#PHP-INFO-START PHP引用配置，可以注釋或修改
#PROXY-START
location /
{
proxy_pass http://localhost:8886;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header REMOTE-HOST $remote_addr;
#持久化連接相關(guān)配置
#proxy_connect_timeout 30s;
#proxy_read_timeout 86400s;
#proxy_send_timeout 30s;
#proxy_http_version 1.1;
#proxy_set_header Upgrade $http_upgrade;
#proxy_set_header Connection "upgrade";
##expires 12h;
}
#PHP-INFO-END
#禁止訪問的文件或目錄
location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)
{
return 404;
}
#一鍵申請SSL證書驗(yàn)證目錄相關(guān)設(shè)置
location ~ \.well-known{
allow all;
}
}
來源：https://ilovey.live/2021/09/09/nginx-config/
最后關(guān)注公眾號Java技術(shù)棧，在后臺(tái)回復(fù)：面試，可以獲取我整理的 Java、Nginx 系列面試題和答案，非常齊全。
關(guān)注Java技術(shù)棧看更多干貨
評論
圖片
表情