配置文件如下
[root@Nginx www]# cat test.conf server {listen 80;server_name ;location / {root html/test;index index.html index.htm;}if ( $http_host ~* "^(.*)") {set $domain $1;rewrite ^(.*) break;}access_log logs/brian.log main gzip buffer=128k flush=5s; error_page 500 502 503 504 /50x.html;location = /50x.html {root html;}# ssl on;# ssl_certificatetest/.pem;# ssl_certificate_key test/.key;# ssl_session_timeout 5m;# ssl_protocols TLSv1 TLSv1.1 TLSv1.2;# ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;# ssl_prefer_server_ciphers on;}
常见的nginx配置文件
worker_processes auto;load_module modules/ngx_http_geoip2_module.so;events {worker_connections 8000;use epoll;multi_accept on;}http {include mime.types;default_type application/octet-stream;log_format main '$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$proxy_add_x_forwarded_for" "$binary_remote_addr" "$http_x_real_ip" "$http_x_forwarded_for" "$geoip2_data_country_code" "$geoip2_data_city_name"';access_log logs/access.log main;sendfile on;server_tokens off; keepalive_timeout 65;client_max_body_size 20m;client_header_timeout 10; client_body_timeout 65; reset_timedout_connection on; send_timeout 10; #limit_req_zone $binary_remote_addr zone=wwwzone:10m rate=10r/s;#limit_req_zone $binary_remote_addr zone=mzone:10m rate=10r/s;#limit_req_zone $binary_remote_addr zone=clubzone:10m rate=100r/s;include gzip.conf;add_header X-Frame-Options SAMEORIGIN;geoip2 /etc/GeoLite2-Country.mmdb {$geoip2_data_country_code default=DEFAULT_COUNTRY source=$http_x_forwarded_for country iso_code;$geoip2_data_country_name country names en;}geoip2 /etc/GeoLite2-City.mmdb {$geoip2_data_city_name default=DEFAULT_CITY source=$http_x_forwarded_for city names en;}fastcgi_intercept_errors on;geo $http_x_forwarded_for $ip_whitelist {default 0;include ip.conf;}#禁止ip访问server {server_name _;return 404;}#前台server#server {# listen 80;#charset UTF-8; # server_name ;##if ( $host != 'https://www.xxx.vip' ) {##rewrite ^/(.*)$ https://www.xxx.vip/$1 permanent;## }# ## location / {# proxy_pass http://127.0.0.1:8080;# proxy_set_header Host $host;# proxy_set_header Remote_Addr $remote_addr;# proxy_set_header X-Real-IP $remote_addr;# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;# index index;## }###location ^~ /manage/static/ueditor/index.html {# return 404;#}#location ^~ /admin/WEB-INF/web.xml {# return 404;#}#}upstream frontcluster {server 127.0.0.1:8081 weight=1; }server {listen 80;server_name ;if ( $http_host ~* "^(.*)") {set $domain $1;rewrite ^(.*) break;}access_log logs/brian.log main gzip buffer=128k flush=5s;error_page 500 502 503 504 /50x.html;location = /50x.html {root html;}}server {listen 80;server_name ;charset utf-8;#limit_req zone=wwwzone burst=5 nodelay;error_page 403 /403.html;location /403.html {allow all;root /home/deploy/nginx/static/;}location /chinaintercept { allow all;root /home/deploy/nginx/static/;}location / {# set $flag 0;# if ($ip_whitelist != 1) {# set $flag "1";# }# if ($geoip2_data_country_code ~ "(CN)") {# set $flag "${flag}2";# }# if ($flag ~ "(12)") {# return 403;# }proxy_pass http://frontcluster/;proxy_redirect default;client_max_body_size 500m;proxy_send_timeout 180;proxy_read_timeout 180;proxy_connect_timeout 180;proxy_set_headerHost$host;proxy_set_headerX-Real-IP$remote_addr;proxy_set_headerX-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_headerX-Forwarded-Proto $scheme;}location ^~ /manage/static/ueditor/index.html {return 404;}location ^~ /admin/WEB-INF/web.xml {return 404;}#location ^~ /swagger-ui {# deny all;#}}server {listen 81;server_name ;charset utf-8;#limit_req zone=mzone burst=5 nodelay;location / {proxy_pass http://frontcluster/;proxy_redirect default;client_max_body_size 500m;proxy_send_timeout 180;proxy_read_timeout 180;proxy_connect_timeout 180;proxy_set_headerHost$host;proxy_set_headerX-Real-IP$remote_addr;proxy_set_headerX-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_headerX-Forwarded-Proto $scheme;}location ^~ /manage/static/ueditor/index.html {return 404;}location ^~ /admin/WEB-INF/web.xml {return 404;}#location ^~ /swagger-ui {# deny all;#}}server {listen 82;charset UTF-8;server_name ;#limit_req zone=clubzone burst=5 nodelay;error_page 403 /403.html;location /403.html {allow all;root /home/deploy/nginx/static/;}location /chinaintercept {allow all;root /home/deploy/nginx/static/;}location / {index index.html index.htm *.html;# set $flag 0;# if ($ip_whitelist != 1) {# set $flag "1";# }# if ($geoip2_data_country_code ~ "(CN)") {# set $flag "${flag}2";# }# if ($flag ~ "(12)") {# return 403;# }#if ($geoip2_data_country_code = CN) {# return 403;#}root static/;}location ^~ /manage/static/ueditor/index.html {return 404;}location ^~ /admin/WEB-INF/web.xml {return 404;}}#https:#server {# listen 443;# server_name ;## ssl on;# ssl_certificate_bundle.crt;# ssl_certificate_key .key;# ssl_session_timeout 5m;# ssl_protocols TLSv1 TLSv1.1 TLSv1.2;## ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;# ssl_prefer_server_ciphers on;#}#https:#server {# listen 443;# server_name ;## ssl on;# ssl_certificate_bundle.crt;# ssl_certificate_key .key;# ssl_session_timeout 5m;# ssl_protocols TLSv1 TLSv1.1 TLSv1.2;## ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;# ssl_prefer_server_ciphers on;#}}
或
worker_processes auto;events {worker_connections 2048;use epoll;multi_accept on;}http {include mime.types;default_type application/octet-stream;sendfile on;server_tokens off; keepalive_timeout 120;client_max_body_size 20m;client_header_timeout 10; client_body_timeout 65; reset_timedout_connection on; send_timeout 10; limit_req_zone $binary_remote_addr zone=allips:10m rate=100r/s;include gzip.conf;server {listen 8077;server_name 192.168.0.112;charset utf-8;root /home/deploy/nginx/mh;index index.html index.htm;location / {try_files $uri $uri/ /index.html;}location /api/ {proxy_pass http://localhost:8098/;proxy_set_header X-Forwarded-Proto $scheme;proxy_set_header Host $http_host;proxy_set_header X-Real-IP $remote_addr;}}server {listen 8087;server_name 192.168.0.112;charset utf-8;root /home/deploy/nginx/cpct_front;index index.html index.htm;#access_log logs/host.access.log main;location / {try_files $uri $uri/ /index.html;}location /api {proxy_pass http://localhost:8090/;proxy_set_header X-Forwarded-Proto $scheme;proxy_set_header Host $http_host;proxy_set_header X-Real-IP $remote_addr;}location /ws {proxy_pass http://localhost:8090/;proxy_http_version 1.1;proxy_set_header Upgrade $http_upgrade;proxy_set_header Connection "upgrade";}location /download/ {root /;rewrite ^/download/(.*)$ /usr/local/nginx/cpct_files/$1 break;# root /usr/local/nginx/cpct_files;default_type 'application/octet-stream';if ($request_filename ~* ^.*?.(txt|doc|pdf|rar|gz|zip|docx|exe|xlsx|ppt|pptx|jpg|png)$){add_header Content-Disposition attachment;}client_max_body_size 10m;}}#后台serverserver{listen 80;charset UTF-8; server_name 192.168.0.112;location ~ ^/(oauth) {proxy_pass http://127.0.0.1:8080;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header Host $host;}location ~ ^/(manage) {proxy_pass http://127.0.0.1:8080;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header Host $host;}location ~ ^/(hryfile) {proxy_pass http://127.0.0.1:8080;proxy_set_header X-Real-IP $remote_addr;proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;proxy_set_header Host $host;}location ~ ^/(admin) {root html/admin;index index.html;}location ^~ /manage/static/ueditor/index.html {return 404;}}#https:#server {# listen 443;# server_name ;## ssl on;# ssl_certificate_bundle.crt;# ssl_certificate_key .key;# ssl_session_timeout 5m;# ssl_protocols TLSv1 TLSv1.1 TLSv1.2;## ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;# ssl_prefer_server_ciphers on;#}##洋洋金服#server {# listen 80;# charset UTF-8;# server_name ;# rewrite ^(.*)$ https://$host$1 permanent;#}#https:server {listen80; server_name ;# ssl on;# ssl_certificatezdzssl/.pem;# ssl_certificate_key zdzssl/.key;# ssl_session_timeout 5m;# ssl_protocols TLSv1 TLSv1.1 TLSv1.2;# ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;# ssl_prefer_server_ciphers on;location / {root zdz;index index.html index.htm *.html;}location ^~ /manage/static/ueditor/index.html {return 404;}location ^~ /admin/WEB-INF/web.xml {return 404;}}}
