nginx基础指令以及conf文件配置

基础指令

  1. 启动命令
start nginx
  1. 关闭命令
nginx -s stop

conf文件配置

    此处直接给出本机文件配置,方便以后使用,其中主要是通过代理实现多个项目部署,并且配置了ssl证书,实现ssl加密.


#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
  worker_connections  1024;
}


http {
  include       mime.types;
  default_type  application/octet-stream;

  #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
  #                  '$status $body_bytes_sent "$http_referer" '
  #                  '"$http_user_agent" "$http_x_forwarded_for"';

  #access_log  logs/access.log  main;

  sendfile        on;
  #tcp_nopush     on;

  #keepalive_timeout  0;
  keepalive_timeout  65;

  #gzip  on;

  server {
      listen       80;
      server_name  maplesong.club;
      rewrite ^(.*)$ https://$host$1 permanent;

      #charset koi8-r;

      #access_log  logs/host.access.log  main;

      # location / {
      #     root   html;
      #     index  index.html index.htm;
      # }

      # location /XiWei/ {
      #     proxy_pass         http://maplesong.club:8889;
      # }

      # location /Maple/ {
      #     proxy_pass         http://maplesong.club:8888;
      # }

      #error_page  404              /404.html;

      # redirect server error pages to the static page /50x.html
      #
      # error_page   500 502 503 504  /50x.html;
      # location = /50x.html {
      #     root   html;
      # }

      # proxy the PHP scripts to Apache listening on 127.0.0.1:80
      #
      #location ~ \.php$ {
      #    proxy_pass   http://127.0.0.1;
      #}

      # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
      #
      #location ~ \.php$ {
      #    root           html;
      #    fastcgi_pass   127.0.0.1:9000;
      #    fastcgi_index  index.php;
      #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
      #    include        fastcgi_params;
      #}

      # deny access to .htaccess files, if Apache's document root
      # concurs with nginx's one
      #
      #location ~ /\.ht {
      #    deny  all;
      #}
  }


  server {  
      listen 80;
      server_name maple.maplesong.club;

      rewrite ^(.*)$ https://$host$1 permanent;

      # location / {
      #     proxy_set_header   X-Real-IP $remote_addr;
      #     proxy_set_header   Host      $http_host;
      #     proxy_pass         http://maplesong.club:8888;
      # }
  }

  server {
      listen 80;
      server_name xiwei.maplesong.club;

      rewrite ^(.*)$ https://$host$1 permanent;

      # location / {
      #     proxy_set_header   X-Real-IP $remote_addr;
      #     proxy_set_header   Host      $http_host;
      #     proxy_pass         http://maplesong.club:8889;
      # }
  }



  # another virtual host using mix of IP-, name-, and port-based configuration
  #
  #server {
  #    listen       8000;
  #    listen       somename:8080;
  #    server_name  somename  alias  another.alias;

  #    location / {
  #        root   html;
  #        index  index.html index.htm;
  #    }
  #}


  # HTTPS server
  #
  server {
     listen       443 ssl;
     server_name  maplesong.club;

     ssl_certificate      maplesong.club_bundle.pem;
     ssl_certificate_key  maplesong.club.key;

     ssl_session_cache    shared:SSL:1m;
     ssl_session_timeout  5m;

     ssl_ciphers  HIGH:!aNULL:!MD5;
     ssl_prefer_server_ciphers  on;

     location / {
         root   html;
         index  index.html index.htm;
     }
  }

  server {
      listen 443 ssl;
      server_name maple.maplesong.club;

      ssl_certificate      maple.maplesong.club_bundle.pem;
      ssl_certificate_key  maple.maplesong.club.key;

      ssl_session_cache    shared:SSL:1m;
      ssl_session_timeout  5m;

      ssl_ciphers  HIGH:!aNULL:!MD5;
      ssl_prefer_server_ciphers  on;

      location / {
          proxy_set_header   X-Real-IP $remote_addr;
          proxy_set_header   Host      $http_host;
          proxy_pass         http://maplesong.club:8888;
      }
  }

  server {
      listen 443 ssl;
      server_name xiwei.maplesong.club;

      ssl_certificate      xiwei.maplesong.club_bundle.pem;
      ssl_certificate_key  xiwei.maplesong.club.key;

      ssl_session_cache    shared:SSL:1m;
      ssl_session_timeout  5m;

      ssl_ciphers  HIGH:!aNULL:!MD5;
      ssl_prefer_server_ciphers  on;

      location / {
          proxy_set_header   X-Real-IP $remote_addr;
          proxy_set_header   Host      $http_host;
          proxy_pass         http://maplesong.club:8889;
      }
  }

}

end

评论