Nginx标准配置文件（包括反向代理、大文件上传、Https证书配置、文件预览等）

秒速五厘米 2022-10-12 04:19 11阅读 0赞

最近项目中使用到Nginx的配置文件中用到了许多功能和特性，例如：反向代理、大文件上传、Https证书配置、文件预览，特此记录便于日后查阅。

#user  nobody;
    worker_processes  1;
    
    #error_log  logs/error.log;
    #error_log  logs/error.log  notice;
    #error_log  logs/error.log  info;
    
    #pid        logs/nginx.pid;
    
    
    events {
        worker_connections  1024;
    }
    
    
    http {
        include       mime.types;
        default_type  application/octet-stream;
    
        #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
        #                  '$status $body_bytes_sent "$http_referer" '
        #                  '"$http_user_agent" "$http_x_forwarded_for"';
    
        #access_log  logs/access.log  main;
    
        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for"';
    
       sendfile            on;
       tcp_nopush          on;
       tcp_nodelay         on;
       keepalive_timeout   10m;
       types_hash_max_size 2048;
    
        #gzip  on;
    
        #server {
        #    listen       80;
        #    server_name  localhost;
    
            #charset koi8-r;
    
            #access_log  logs/host.access.log  main;
    
         #   location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
    
            #error_page  404              /404.html;
    
            # redirect server error pages to the static page /50x.html
            #
        #    error_page   500 502 503 504  /50x.html;
        #    location = /50x.html {
        #        root   html;
        #    }
    
            # proxy the PHP scripts to Apache listening on 127.0.0.1:80
            #
            #location ~ \.php$ {
            #    proxy_pass   http://127.0.0.1;
            #}
    
            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
            #
            #location ~ \.php$ {
            #    root           html;
            #    fastcgi_pass   127.0.0.1:9000;
            #    fastcgi_index  index.php;
            #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            #    include        fastcgi_params;
            #}
    
            # deny access to .htaccess files, if Apache's document root
            # concurs with nginx's one
            #
            #location ~ /\.ht {
            #    deny  all;
            #}
        #}
    
    
        # another virtual host using mix of IP-, name-, and port-based configuration
        #
        #server {
        #    listen       8000;
        #    listen       somename:8080;
        #    server_name  somename  alias  another.alias;
    
        #    location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
        #}
    
    
        # HTTPS server
        #
        #server {
        #    listen       443 ssl;
        #    server_name  localhost;
    
        #    ssl_certificate      cert.pem;
        #    ssl_certificate_key  cert.key;
    
        #    ssl_session_cache    shared:SSL:1m;
        #    ssl_session_timeout  5m;
    
        #    ssl_ciphers  HIGH:!aNULL:!MD5;
        #    ssl_prefer_server_ciphers  on;
    
        #    location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
        #}
        gzip on;
        gzip_min_length 1k;
        gzip_comp_level 9;
        gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
        gzip_vary on;
        gzip_disable "MSIE [1-6]\.";
    
        upstream admin {
     	    server localhost:10000 weight=5;
        }
        upstream app {
    	    server localhost:10010 weight=5;
        }
        upstream device {
            server localhost:10020 weight=5;
        }
    
        server {
           listen 80;
           server_name localhost;
           rewrite ^(.*)$ https://$host$1 permanent;
        }
    
        server {
            listen 443 ssl;
            server_name  pay.alibaba.com.cn;
    
    	    client_max_body_size 550M;
            client_header_timeout 20m;
            client_body_timeout 20m;
            proxy_connect_timeout 1500s;
            proxy_read_timeout 20m;
            proxy_send_timeout 20m;
    
            ssl_certificate      /usr/local/nginx/conf/certs/pay.alibaba.com.cn.pem;
            ssl_certificate_key  /usr/local/nginx/conf/certs/pay.alibaba.com.cn.key;
    	    ssl_session_cache   shared:SSL:1m;
    	    ssl_session_timeout 5m;
    	    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    	    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    	    ssl_prefer_server_ciphers on;
    	
    	    underscores_in_headers on;
    	    proxy_set_header Host $host;
    	    proxy_set_header X-Real-IP $remote_addr;
    	    proxy_set_header REMOTE-HOST $remote_addr;
    	    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    	    proxy_set_header X-Forwarded-Proto $scheme;
    
            location ^~ /admin/ {
                proxy_pass http://admin/;
            }
    	    location ^~ /app/ {
                proxy_pass http://app/;
            }
    	    location ^~ /device/ {
                proxy_pass http://device/;
            }
    	    location / {
    	        root html/dist;
                try_files $uri /index.html;
    	        index index.html index.htm;
    	    }
    	    location ^~ /.well-known {
                allow all;
            }
    	    location ^~ /apps/alibaba {
                if ($http_user_agent ~* "iphone") {
                    rewrite ^(.*)$ https://apps.apple.com/cn/app/%E6%A0%BC%E5%85%B0%E4%BB%95%E7%BE%8E%E9%A3%9F/id1531040880;
                }
                if ($http_user_agent ~* "(mobile|nokia|android|samsung|htc|blackberry)") {
                    rewrite ^(.*)$ https://app.alibaba.com.cn/alibaba;
                }
            }
    	    location ^~ /support/after {
                rewrite ^(.*)$ https://www.alibaba.com.cn/?page_id=1638;
            }
    	    location ^~ /alibaba/ {
                alias html/alibaba/;
            } 
        }
    
        #include blockip.conf;
    }

到此Nginx标准配置文件（包括反向代理、大文件上传、Https证书配置、文件预览等）介绍完成。