>
目錄
- 一、常用命令:
- 二、注意要點(diǎn)
- 三、http請(qǐng)求配置
一、常用命令:
//開啟服務(wù): start nginx 直接點(diǎn)擊Nginx目錄下的nginx.exe //停止服務(wù):nginx停止命令stop與quit參數(shù)的區(qū)別在于stop是快速停止nginx,可能并不保存相關(guān)信息,quit是完整有序的停止nginx ,并保存相關(guān)信息。nginx啟動(dòng)與停止命令的效果都可以通過Windows任務(wù)管理器中的進(jìn)程選項(xiàng)卡觀察。 nginx -s stop nginx -s quit //其他命令重啟、關(guān)閉nginx ps -ef | grep nginx //從容停止Nginx kill -QUIT 主進(jìn)程號(hào) //快速停止Nginx kill -TERM 主進(jìn)程號(hào) //強(qiáng)制停止Nginx pkill -9 nginx //平滑重啟nginx: kill -HUP 主進(jìn)程號(hào) //重啟服務(wù): nginx -s reload //檢查配置文件是否有語法操作 ./nginx -t //或者顯示指定配置文件 ./nginx -t -c /usr/local/nginx/conf/nginx.conf
二、注意要點(diǎn)
動(dòng)靜分離要點(diǎn),必須把訪問服務(wù)器的端口寫成nginx監(jiān)聽的端口,這樣才能避免跨域 配置參數(shù)說明: nigix做反向代理 注意 :$proxy_port 與 :$server_port 區(qū)別 $server_port :nigix監(jiān)聽的端口 $proxy_port : 服務(wù)器真正訪問的端口 #一般情況都用這個(gè)host proxy_set_header Host $host; #獲取到用戶真實(shí)IP配置 proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
三、http請(qǐng)求配置
1、前后端分離普通配置
server {
listen 8203;
location / {
root /usr/www/validation-demo/h5-1-advance;
index index.html;
try_files $uri $uri/ /index.html;
if ($request_filename ~* .*\.(?:htm|html)$){
add_header Cache-Control "private, no-store, no-cache, must-revalidate, proxy-revalidate";
}
}
location /api/ {
proxy_pass http://192.168.8.10:5001/;
}
}
2、增加了HTTPS的前后端分離配置
server {
listen 443;
server_name www.huzhihui.com;
ssl on;
ssl_certificate /etc/nginx/cert/5673168_www.huzhihui.com.pem;
ssl_certificate_key /etc/nginx/cert/5673168_www.huzhihui.com.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
root /alidata/view/eip-home;
index index.html;
try_files $uri $uri/ /index.html;
if ($request_filename ~* .*\.(?:htm|html)$){
add_header Cache-Control "private, no-store, no-cache, must-revalidate, proxy-revalidate";
}
expires 7d;
}
location /api/ {
proxy_pass http://127.0.0.1:56000/;
}
}
server{
listen 80;
server_name www.huzhihui.com;
rewrite ^/(.*)$ https://www.huzhihui.com/$1 permanent;
}
3、老項(xiàng)目強(qiáng)制HTTPS POST出現(xiàn)問題的解決方案
server{
listen 80;
server_name wx.huzhihui.cn;
add_header Strict-Transport-Security max-age=15768000;
location / {
if ($request_method ~ ^(POST|DELETE|OPTIONS)$) {
proxy_pass https://wx.huzhihui.cn;
break ;
}
rewrite ^/(.*)$ https://wx.huzhihui.cn/$1 permanent;
}
}
4、普通前后端一起的工程網(wǎng)站部署
upstream web_servers {
server localhost:8080;
server localhost:8081;
}
server {
listen 80;
server_name www.huzhihui.com;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://web_servers;
}
location ~.*\.(js|css)$ {
root /opt/static-resources;
expires 12h;
}
location ~.*\.(html|jpg|jpeg|png|bmp|gif|ico|mp3|mid|wma|mp4|swf|flv|rar|zip|txt|doc|ppt|xls|pdf)$ {
root /opt/static-resources;
expires 7d;
}
error_page 404 /404.html;
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
}
5、 動(dòng)靜分離+負(fù)載均衡配置
upstream web_servers {
server localhost:8080;
server localhost:8081;
}
server {
listen 80;
server_name www.huzhihui.com;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://web_servers;
}
location ~.*\.(js|css)$ {
root /opt/static-resources;
expires 12h;
}
location ~.*\.(html|jpg|jpeg|png|bmp|gif|ico|mp3|mid|wma|mp4|swf|flv|rar|zip|txt|doc|ppt|xls|pdf)$ {
root /opt/static-resources;
expires 7d;
}
error_page 404 /404.html;
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
}
6、 通用https配置
server {
listen 443;
server_name www.huzhihui.com;
ssl on;
ssl_certificate cert-tues/214069203020278.pem;
ssl_certificate_key cert-tues/214069203020278.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://127.0.0.1:9002/;
proxy_redirect default;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server{
listen 80;
server_name www.huzhihui.com;
rewrite ^/(.*)$ https://server.ourtues.com/$1 permanent;
}
nginx配置
>






