003.Nginx配置解析
一 Nginx配置文件1.1 Nginx主配置
Nginx主配置文件/etc/nginx/nginx.conf是一个纯文本类型的文件，整个配置文件是以区块的形式组织，通常每一个区块以一对大括号{}来表示开始与结束。提示：若编译安装则为编译时所指定目录。- Main位于nginx.conf配置文件的最高层；
- Main层下可以有Event、HTTP层；
- Http层下面允许有多个Server层，用于对不同的网站做不同的配置；
- Server层下面允许有多个Location，用于对不同的路径进行不同模块的配置。
#如下为全局Main配置： 1user nginx; 2 worker_processes 1;
3
4 error_log /var/log/nginx/error.log warn;
5 pid /var/run/nginx.pid;
#如下为Event配置： 1 events { 2 worker_connections 1024;
3 }
#如下为http配置： 1 http { 2 include /etc/nginx/mime.types;
3 default_type application/octet-stream;
4 log_format main "$remote_addr - $remote_user [$time_local] "$request" "
5 "$status $body_bytes_sent "$http_referer" "
6 ""$http_user_agent" "$http_x_forwarded_for"";
7 access_log /var/log/nginx/access.log main;
8 sendfile on;
9#tcp_nopush on;
10 keepalive_timeout 65;
11#gzip on;
12 include /etc/nginx/conf.d/*.conf;
13 }
提示：通常Server配置在独立的/etc/nginx/conf.d/*.conf中，通过引用的方式调用，如下/etc/nginx/conf.d/default.conf： 1 server { 2 listen 80;
3 server_name localhost;
4 location / {
5 root /usr/share/nginx/html;
6indexindex.html index.htm;
7 }
8 error_page 500 502 503 504 /50x.html;
9 location = /50x.html {
10 root /usr/share/nginx/html;
11 }
12 }
1.2 Nginx全局配置
1user nginx; #进程用户 2 worker_processes 1; #工作进程，配合和CPU个数保持一致
3 error_log /var/log/nginx/error.log warn; #错误日志路径及级别
4 pid /var/run/nginx.pid; #Nginx服务启动的pid
1.3 Nginx events事件配置
1 events { 2 worker_connections 1024; #每个worker进程支持的最大连接数
3 use epoll; #内核模型，select、poll、epoll
4 }
1.4 Nginx公共配置
1 http { 2 include /etc/nginx/mime.types; #指定在当前文件中包含另一个文件的指令
3 default_type application/octet-stream; #指定默认处理的文件类型可以是二进制
4
5 log_format main "$remote_addr - $remote_user [$time_local] "$request" "
6 "$status $body_bytes_sent "$http_referer" "
7 ""$http_user_agent" "$http_x_forwarded_for""; #日志格式
8
9 access_log /var/log/nginx/access.log main; #访问日志
10
11 sendfile on; #优化静态资源
12#tcp_nopush on; #nginx不要缓存数据，而是一段一段发送
13
14 keepalive_timeout 65; #给客户端分配连接超时时间，服务器会在这个时间过后关闭连接。
15
16#gzip on; #压缩
1.5 Nginx server配置
Nginx必须使用虚拟机配置站点，每个虚拟主机使用一个server。 1 server { 2 listen 80; #监听端口，默认80
3 server_name localhost; #提供服务的域名或主机名
4
5#charset koi8-r;
6
7#access_log logs/host.access.log main;
8
9 location / { #控制网站访问路径
10 root /usr/share/nginx/html; #存放网站的路径
11indexindex.html index.htm; #默认访问的首页
12 }
13#error_page 404 /404.html; #错误页面
14
15# redirect server error pages to the static page /50x.html
16#
17 error_page 500 502 503 504 /50x.html; #定义请求错误，指定错误代码
18 location = /50x.html { #错误代码重定向到新的location
19 root html;
20 }
21# another virtual host using mix of IP-, name-, and port-based configuration
22#
23#server { #server段配置
24# listen 8000;
25# listen somename:8080;
26# server_name somename alias another.alias;
27
28# location / {
29# root html;
30# index index.html index.htm;
31# }
32#}
33
34
35# HTTPS server
36#
37#server { #server段配置
38# listen 443 ssl;
39# server_name localhost;
40
41# ssl_certificate cert.pem;
42# ssl_certificate_key cert.key; #SSL证书配置
43
44# ssl_session_cache shared:SSL:1m;
45# ssl_session_timeout 5m;
46
47# ssl_ciphers HIGH:!aNULL:!MD5;
48# ssl_prefer_server_ciphers on;
49
50# location / {
51# root html;
52# index index.html index.htm;
53# }
54#}
55 }
提示：index指令中列出多个文件名，NGINX按指定的顺序搜索文件并返回它找到的第一个文件。Nginx更多配置释义可参考：https://blog.csdn.net/tsummerb/article/details/79248015。二 Nginx网站配置2.1 Nginx配置网站
1 [root@nginx ~]# vi /etc/nginx/conf.d/base.conf 2 server {
3 server_name base.linuxds.com;
4 location / {
5 root /usr/share/nginx/base;
6indexindex.html;
7 }
8 }
9
10 server {
11 server_name blog.linuxds.com;
12 location / {
13 root /usr/share/nginx/blog;
14indexindex.html;
15 }
16 location /ok {
17 alias /usr/share/nginx/yes;
18indexindex.html;
19 }
20 }
21 [root@nginx01 ~]# mkdir -p /usr/share/nginx/{base,blog,yes}
22 [root@nginx01 ~]# echo "<h1>www</h1>" > /usr/share/nginx/base/index.html
23 [root@nginx01 ~]# echo "<h1>blog</h1>" > /usr/share/nginx/blog/index.html
24 [root@nginx01 ~]# echo "<h1>love</h1>" > /usr/share/nginx/blog/love.html
25 [root@nginx01 ~]# echo "<h1>yes</h1>" > /usr/share/nginx/yes/index.html
26 [root@nginx01 ~]# nginx -t -c /etc/nginx/nginx.conf #检查配置文件
27 [root@nginx01 ~]# nginx -s reload #重载配置文件
2.2 测试访问
浏览器访问：base.linuxds.com浏览器访问：blog.linuxds.com浏览器访问：blog.linuxds.com/ok浏览器访问：blog.linuxds.com/love.html注：请添加对应的域名解析，添加方式取决于不同的IP及网络环境，具体操作略。2.3 Nginx配置错误页面
1 [root@nginx01 ~]# vi /etc/nginx/conf.d/base.conf 2 server {
3 server_name base.linuxds.com;
4 location / {
5 root /usr/share/nginx/base;
6indexindex.html;
7 }
8 }
9
10 server {
11 server_name blog.linuxds.com;
12
13 error_page 404 403 500 502 503 504 /baseerror.html; #配置错误页
14 location /baseerror.html {
15 root /usr/share/nginx/html;
16 }
17
18 location / {
19 root /usr/share/nginx/blog;
20indexindex.html;
21 }
22 location /ok {
23 alias /usr/share/nginx/yes;
24indexindex.html;
25 }
26 }
27 [root@nginx01 ~]# echo "<h1>Error</h1>" > /usr/share/nginx/html/baseerror.html
28 [root@nginx01 ~]# nginx -t -c /etc/nginx/nginx.conf #检查配置文件
29 [root@nginx01 ~]# nginx -s reload #重载配置文件
2.4 测试Error
浏览器访问任何一个不存在的页面，如：http://blog.linuxds.com/hhhh三 Nginx相关安全策略3.1 禁止htaccess
1 location ~/.ht { 2 deny all;
3 }
3.2 禁止多个目录
1 location ~ ^/(picture|move)/ { 2 deny all;
3 break;
4 }
3.3 禁止/data开头的文件
1 location ~ ^/data { 2 deny all;
3 }
3.4 禁止单个目录
1 location /imxhy/images/ { 2 deny all;
3 }
3.5 特定允许访问
1 root /usr/share/nginx/rewrite/; 2 allow 208.97.167.194;
3 allow 222.33.1.2;
4 allow 231.152.49.4;
5 deny all;
6 auth_basic "xhy";
7 auth_basic_user_file htpasswd;
2 worker_processes 1;
3
4 error_log /var/log/nginx/error.log warn;
5 pid /var/run/nginx.pid;
2 worker_connections 1024;
3 }
2 include /etc/nginx/mime.types;
3 default_type application/octet-stream;
4 log_format main "$remote_addr - $remote_user [$time_local] "$request" "
5 "$status $body_bytes_sent "$http_referer" "
6 ""$http_user_agent" "$http_x_forwarded_for"";
7 access_log /var/log/nginx/access.log main;
8 sendfile on;
9#tcp_nopush on;
10 keepalive_timeout 65;
11#gzip on;
12 include /etc/nginx/conf.d/*.conf;
13 }
2 listen 80;
3 server_name localhost;
4 location / {
5 root /usr/share/nginx/html;
6indexindex.html index.htm;
7 }
8 error_page 500 502 503 504 /50x.html;
9 location = /50x.html {
10 root /usr/share/nginx/html;
11 }
12 }
2 worker_processes 1; #工作进程，配合和CPU个数保持一致
3 error_log /var/log/nginx/error.log warn; #错误日志路径及级别
4 pid /var/run/nginx.pid; #Nginx服务启动的pid
2 worker_connections 1024; #每个worker进程支持的最大连接数
3 use epoll; #内核模型，select、poll、epoll
4 }
2 include /etc/nginx/mime.types; #指定在当前文件中包含另一个文件的指令
3 default_type application/octet-stream; #指定默认处理的文件类型可以是二进制
4
5 log_format main "$remote_addr - $remote_user [$time_local] "$request" "
6 "$status $body_bytes_sent "$http_referer" "
7 ""$http_user_agent" "$http_x_forwarded_for""; #日志格式
8
9 access_log /var/log/nginx/access.log main; #访问日志
10
11 sendfile on; #优化静态资源
12#tcp_nopush on; #nginx不要缓存数据，而是一段一段发送
13
14 keepalive_timeout 65; #给客户端分配连接超时时间，服务器会在这个时间过后关闭连接。
15
16#gzip on; #压缩
2 listen 80; #监听端口，默认80
3 server_name localhost; #提供服务的域名或主机名
4
5#charset koi8-r;
6
7#access_log logs/host.access.log main;
8
9 location / { #控制网站访问路径
10 root /usr/share/nginx/html; #存放网站的路径
11indexindex.html index.htm; #默认访问的首页
12 }
13#error_page 404 /404.html; #错误页面
14
15# redirect server error pages to the static page /50x.html
16#
17 error_page 500 502 503 504 /50x.html; #定义请求错误，指定错误代码
18 location = /50x.html { #错误代码重定向到新的location
19 root html;
20 }
21# another virtual host using mix of IP-, name-, and port-based configuration
22#
23#server { #server段配置
24# listen 8000;
25# listen somename:8080;
26# server_name somename alias another.alias;
27
28# location / {
29# root html;
30# index index.html index.htm;
31# }
32#}
33
34
35# HTTPS server
36#
37#server { #server段配置
38# listen 443 ssl;
39# server_name localhost;
40
41# ssl_certificate cert.pem;
42# ssl_certificate_key cert.key; #SSL证书配置
43
44# ssl_session_cache shared:SSL:1m;
45# ssl_session_timeout 5m;
46
47# ssl_ciphers HIGH:!aNULL:!MD5;
48# ssl_prefer_server_ciphers on;
49
50# location / {
51# root html;
52# index index.html index.htm;
53# }
54#}
55 }
2.1 Nginx配置网站
1 [root@nginx ~]# vi /etc/nginx/conf.d/base.conf2 server {
3 server_name base.linuxds.com;
4 location / {
5 root /usr/share/nginx/base;
6indexindex.html;
7 }
8 }
9
10 server {
11 server_name blog.linuxds.com;
12 location / {
13 root /usr/share/nginx/blog;
14indexindex.html;
15 }
16 location /ok {
17 alias /usr/share/nginx/yes;
18indexindex.html;
19 }
20 }
21 [root@nginx01 ~]# mkdir -p /usr/share/nginx/{base,blog,yes}
22 [root@nginx01 ~]# echo "<h1>www</h1>" > /usr/share/nginx/base/index.html
23 [root@nginx01 ~]# echo "<h1>blog</h1>" > /usr/share/nginx/blog/index.html
24 [root@nginx01 ~]# echo "<h1>love</h1>" > /usr/share/nginx/blog/love.html
25 [root@nginx01 ~]# echo "<h1>yes</h1>" > /usr/share/nginx/yes/index.html
26 [root@nginx01 ~]# nginx -t -c /etc/nginx/nginx.conf #检查配置文件
27 [root@nginx01 ~]# nginx -s reload #重载配置文件
2.2 测试访问
浏览器访问：base.linuxds.com浏览器访问：blog.linuxds.com浏览器访问：blog.linuxds.com/ok浏览器访问：blog.linuxds.com/love.html注：请添加对应的域名解析，添加方式取决于不同的IP及网络环境，具体操作略。2.3 Nginx配置错误页面
1 [root@nginx01 ~]# vi /etc/nginx/conf.d/base.conf2 server {
3 server_name base.linuxds.com;
4 location / {
5 root /usr/share/nginx/base;
6indexindex.html;
7 }
8 }
9
10 server {
11 server_name blog.linuxds.com;
12
13 error_page 404 403 500 502 503 504 /baseerror.html; #配置错误页
14 location /baseerror.html {
15 root /usr/share/nginx/html;
16 }
17
18 location / {
19 root /usr/share/nginx/blog;
20indexindex.html;
21 }
22 location /ok {
23 alias /usr/share/nginx/yes;
24indexindex.html;
25 }
26 }
27 [root@nginx01 ~]# echo "<h1>Error</h1>" > /usr/share/nginx/html/baseerror.html
28 [root@nginx01 ~]# nginx -t -c /etc/nginx/nginx.conf #检查配置文件
29 [root@nginx01 ~]# nginx -s reload #重载配置文件
2.4 测试Error
浏览器访问任何一个不存在的页面，如：http://blog.linuxds.com/hhhh三 Nginx相关安全策略3.1 禁止htaccess
1 location ~/.ht { 2 deny all;
3 }
3.2 禁止多个目录
1 location ~ ^/(picture|move)/ { 2 deny all;
3 break;
4 }
3.3 禁止/data开头的文件
1 location ~ ^/data { 2 deny all;
3 }
3.4 禁止单个目录
1 location /imxhy/images/ { 2 deny all;
3 }
3.5 特定允许访问
1 root /usr/share/nginx/rewrite/; 2 allow 208.97.167.194;
3 allow 222.33.1.2;
4 allow 231.152.49.4;
5 deny all;
6 auth_basic "xhy";
7 auth_basic_user_file htpasswd;
2 deny all;
3 }
2 deny all;
3 break;
4 }
2 deny all;
3 }
2 deny all;
3 }
2 allow 208.97.167.194;
3 allow 222.33.1.2;
4 allow 231.152.49.4;
5 deny all;
6 auth_basic "xhy";
7 auth_basic_user_file htpasswd;
原文链接：https://www.cnblogs.com/itzgr/archive/2020/07/08/13266280.html
以上是 003.Nginx配置解析 的全部内容， 来源链接： utcz.com/z/518151.html
