nginx在liunx下的常用操作命令

Myth丶恋晨 2022-05-31 11:24 156阅读 0赞

阅读目录

*  [1. 安装][1.]
 *  [2. 配置][2.]
 *  [3. 转发][3.]
 *  [3. 路由][3. 1]
 *  [4. SSL配置][4. SSL]

[回到顶部][Link 1]

## 1. 安装 ##

CentOS 7上Nginx的安装和启动方法如下

![复制代码][copycode.gif]

# yum install nginx
    
    # firewall-cmd --permanent --zone=public --add-service=http
    # firewall-cmd --permanent --zone=public --add-service=https
    # firewall-cmd --reload
    
    # systemctl start nginx
    # systemctl enable nginx

![复制代码][copycode.gif]

安装完成后在浏览器中打开服务器对应的IP地址即可测试是否安装成功

[回到顶部][Link 1]

## 2. 配置 ##

Nginx的主配置文件是/etc/nginx/nginx.conf, 更详细的介绍参考文末

[回到顶部][Link 1]

## 3. 转发 ##

转发也叫正向代理, 以下的配置将所有http请求转发至[www.example.com][]

![复制代码][copycode.gif]

server {
            listen       80 default_server;
            listen       [::]:80 default_server;
            server_name  _;
            root         /usr/share/nginx/html;
    
            # Load configuration files for the default server block.
            include /etc/nginx/default.d/*.conf;
    
            location / {
     resolver 114.114.114.114; proxy_pass http://www.example.com:80;
            }
    
            error_page 404 /404.html;
                location = /40x.html {
            }
    
            error_page 500 502 503 504 /50x.html;
                location = /50x.html {
            }
        }

![复制代码][copycode.gif]

注意: Nginx不支持https正向代理.

[回到顶部][Link 1]

## 4. 路由 ##

章节二中把所有请求全部转发至另一个地址, 现在假如我们的服务器除了转发之外还要能够自行处理部分请求

为了进行方便区分, 我们需要进行如下路由:  除了/forward/...进行转发外, 其他请求自己处理  
[http://IP-A/forward/a/b/c][http_IP-A_forward_a_b_c]  --->  [http://IP-B/a/b/c][http_IP-B_a_b_c]

配置如下

![复制代码][copycode.gif]

location / {
            }
    
            location ^~ /forward/ {
                resolver   114.114.114.114;
                proxy_pass http://www.example.com:80/;
            }

![复制代码][copycode.gif]

[回到顶部][Link 1]

## 5. SSL配置 ##

假定域名已经申请到SSL证书, 下面的配置开启SSL支持

![复制代码][copycode.gif]

server {
            listen       443 ssl http2 default_server;
            listen       [::]:443 ssl http2 default_server;
            server_name  www.example.com;
            root         /var/www
    
            ssl_certificate "/opt/certs/www.example.com_bundle.crt";
            ssl_certificate_key "/opt/certs/www.example.com.key";
            ssl_session_cache shared:SSL:1m;
            ssl_session_timeout  10m;
            ssl_ciphers HIGH:!aNULL:!MD5;
            ssl_prefer_server_ciphers on;
    
            # Load configuration files for the default server block.
            include /etc/nginx/default.d/*.conf;
    
            location / {
            }
    
            error_page 404 /404.html;
                location = /40x.html {
            }
    
            error_page 500 502 503 504 /50x.html;
                location = /50x.html {
            }
        }

![复制代码][copycode.gif]

常用操作：

/usr/local/nginx/sbin/nginx  启动

/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf  启动，载入当前配置

/usr/local/nginx/sbin/nginx -t 测试配置

/usr/local/nginx/sbin/nginx -s reload   加载配置--不是重启，但可以当重启使用

/usr/local/nginx/sbin/nginx -s stop    退出

/usr/local/nginx/sbin/nginx -s quit  保持未结束的进程后退出

/usr/local/nginx/sbin/nginx -s reopen 日志重新选择

配置文件位置：  
/usr/local/nginx/conf/nginx.conf

5.ssl配置----假定域名已经申请到SSL证书, 下面的配置开启SSL支持

[1.]: https://www.cnblogs.com/hzl6255/p/7324438.html#_label0
[2.]: https://www.cnblogs.com/hzl6255/p/7324438.html#_label1
[3.]: https://www.cnblogs.com/hzl6255/p/7324438.html#_label2
[3. 1]: https://www.cnblogs.com/hzl6255/p/7324438.html#_label3
[4. SSL]: https://www.cnblogs.com/hzl6255/p/7324438.html#_label4
[Link 1]: https://www.cnblogs.com/hzl6255/p/7324438.html#_labelTop
[copycode.gif]: /images/20220531/44710417728043ab8b79405042cfe064.png
[www.example.com]: http://www.example.com/
[http_IP-A_forward_a_b_c]: http://ip-a/forward/a/b/c
[http_IP-B_a_b_c]: http://ip-b/a/b/c