nginx 常见配置

阳光穿透心脏的1/2处 2022-09-03 00:13 173阅读 0赞

Nginx 是一个高性能的 HTTP 和反向代理 web 服务器，同时也提供了 IMAP/POP3/SMTP 服务，其因丰富的功能集、稳定性、示例配置文件和低系统资源的消耗受到了开发者的欢迎。本文，我们总结了一些常用的 Nginx 配置代码，希望对大家有所帮助。

# nginx 配置http自动跳转https #

一、按照如下格式修改nginx.conf 配置文件，80端口会自动转给443端口，这样就强制使用SSL证书加密了。访问http的时候会自动跳转到https上面。

server {
      listen 80;
      server_name www.域名.com;
      rewrite ^(.*) https://$server_name$1 permanent;
    }
    server {
      listen 443;
      server_name www.域名.com;
      root /home/www;
      ssl on;
      ssl_certificate /etc/nginx/certs/server.crt;
      ssl_certificate_key /etc/nginx/certs/server.key;
    }

项目实战

##   start
    server {
            # 监听的端口号
            listen  80;
            listen 443 default ssl;
            # 服务名称 生产环境要修改成 公网ip 如 47.105.134.120
            server_name   ghui.net;
            ssl_certificate  /www/ .pem;
            ssl_certificate_key /www/ .key;
            # 配置根目录的地址是以 nginx 下的 html 文件夹为根目录来查找的
            root /www/;
            
            #vue 解决history路由
           location / {
                try_files $uri $uri/ /index.html;	    
            }
            error_page   500 502 503 504  /50x.html;
            location = /50x.html {
                root   html;
            }
        }
        ##  end

vue 解决history路由

location / {
                try_files $uri $uri/ /index.html;	    
            }

侦听端口

server {
      # Standard HTTP Protocol
      listen 80;
      # Standard HTTPS Protocol
      listen 443 ssl;
      # For http2
      listen 443 ssl http2;
      # Listen on 80 using IPv6
      listen [::]:80;
      # Listen only on using IPv6
      listen [::]:80 ipv6only=on;
    }

访问日志  
server \{\# Relative or full path to log fileaccess\_log /path/to/file.log;\# Turn ‘on’ or ‘off’ access\_log on;\}域名server \{

# Listen to yourdomain.com #

server\_name yourdomain.com;

# Listen to multiple domains server\_name yourdomain.com www.yourdomain.com; #

# Listen to all domains #

server\_name \*.yourdomain.com;

# Listen to all top-level domains #

server\_name yourdomain.\*;

# Listen to unspecified Hostnames (Listens to IP address itself) #

server\_name “”;  
\}

nginx配置静态文件

location /MPIV.txt {
        			alias /www/vueLottery/MPIV.txt;
        		}

server {
      listen 80;
      server_name yourdomain.com;
      location / {
      	root /path/to/website;
      }

重定向

server {
      listen 80;
      server_name www.yourdomain.com;
      return 301 http://yourdomain.com$request_uri;
    }
    server {
      listen 80;
      server_name www.yourdomain.com;
      location /redirect-url {
        return 301 http://otherdomain.com;
      }
    }

反向代理

server {listen 80;server_name yourdomain.com;location / {proxy_pass http://0.0.0.0:3000;# where 0.0.0.0:3000 is your application server (Ex: node.js) bound on 0.0.0.0 listening on port 3000}}

负载均衡

upstream node_js {
      server 0.0.0.0:3000;
      server 0.0.0.0:4000;
      server 123.131.121.122;
      }
      server {
        listen 80;
        server_name yourdomain.com;
        location / {
        proxy_pass http://node_js;
      }
    }

SSL 协议

server {
      listen 443 ssl;
      server_name yourdomain.com;
      ssl on;
      ssl_certificate /path/to/cert.pem;
      ssl_certificate_key /path/to/privatekey.pem;
      ssl_stapling on;
      ssl_stapling_verify on;
      ssl_trusted_certificate /path/to/fullchain.pem;
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
      ssl_session_timeout 1h;
      ssl_session_cache shared:SSL:50m;
      add_header Strict-Transport-Security max-age=15768000;
      }
      # Permanent Redirect for HTTP to HTTPS
      server 
      {
      listen 80;
      server_name yourdomain.com;
      return 301 https://$host$request_uri;
    }

其实可以采用可视化的方式对 Nginx 进行配置，我在 GitHub 上发现了一款可以一键生成 Nginx 配置的神器，相当给力。先来看看它都支持什么功能的配置：反向代理、HTTPS、HTTP/2、IPv6, 缓存、WordPress、CDN、Node.js 支持、 Python (Django) 服务器等等。如果你想在线进行配置，只需要打开网站：https://nginxconfig.io/，按照自己的需求进行操作就行了。

https://www.yuque.com/yaoyq/vgh8lz/sua0d8