Nginx的一些常用設定彙總

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

events {
	# 預設使用epolL 
	use epoll;
	# 每個worker允許連線的使用者端最大連線數
	worker_connections 1024;
}

http {
}

#log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
#                  '$status $body_bytes_sent "$http_referer" '
#                  '"$http_user_agent" "$http_x_forwarded_for"';

#access_log  logs/access.log  main;

sendfile        on;
tcp_nopush     on;

#keepalive_timeout  0;
keepalive_timeout  65;

server {
    listen       80;
    server_name  localhost;
    location / {
        root   html;
        index  index.html index.htm;
    }

    #error_page  404              /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }
}

#!/bin/ bash
L0G_PATH="/var/log/nginx"
RECORD_TIME=$(date -d "yesterday" +%Y-%m-%d+%H:%M)
PID=/var/run/nginx/nginx.pid
mv ${LOG_PATH}/access.log ${LOG_PATH}/access.${RECORD_TIME}.log
mv ${LOG_PATH}/error.log ${LOG_PATH}/error.${RECORD_TIME}.log
#向Nginx主程序傳送訊號，用於重新開啟紀錄檔檔案
kill -USR1 `cat $PID`

yum install crontabs

*/1 * * * * /usr/local/nginx/sbin/cut_my_log.sh

service crond restart

service crond start			//啟動服務
service crond stop			//關閉服務
service crond restart		//重啟服務
service crond reload		//重新載入設定
crontab -e					//編輯任務
crontab -l					//檢視任務列表

location /imooc {
    root /home
}

location /hello {
    alias /home/imooc
}

# 開啟gzip壓縮功能，目的∶提高傳輸效率，節約頻寬
gzip on;
# 限制最小壓縮，小於1位元組檔案不會壓縮
gzip_min_length 1;
# 定義壓縮的級別（壓縮比，檔案越大，壓縮越多，但是cpu使用會越多）
gzip_comp_level 3;
# 定義壓縮檔案的型別
gzip_types text/plain application/javascript application/x-javascript text/css applicatio n/xmL text/javascript application/x-httpd-php image/jpeg image/gif image/png application/jison;

location / {
	root /home
}

location = /imooc/img/face1.png {
	root /home;
}

# 符合圖片的顯示
location ~* .(GIF|jpg|png|jpeg){
	root /home;
}

# GIF必須大寫才能匹配到
location ~ .(GIF|jpg|png|jpeg){
	root /home;
}

location ^~ /imooc/img {
	root /home;
}

#允許跨域請求的域，*代表所有 
add_header 'Access-Control-Allow-Origin' *; 
#允許帶上cookie請求 
add_header 'Access-Control-Allow-Credentials' 'true'; 
#允許請求的方法，比如 GET/POST/PUT/DELETE 
add_header 'Access-Control-Allow-Methods' *; 
#允許請求的header 
add_header 'Access-Control-Allow-Headers' *;

#對源站點驗證 
valid_referers *.imooc.com; 
#非法引入會進入下方判斷 
if ($invalid_referer) { 
	return 404; 
}

upstream tomcats {
	ip_hash;

	server 192.168.1.173:8080;
	server 192.168.1.174:8080 down;
	server 192.168.1.175:8080;
}

upstream tomcats {
	# url  hash
	hash $request_uri;
	# 最少連線數
	# least_Conn
	server 192.168.1.173:8080;
	server 192.168.1.174:8080;
	server 192.168.1.175:8080;
}

server {
	listen 80;
	server_name www.tomcats.Com;
	
	location / {
		proxy_pass http://tomcats;
	}
}

# worker程序設定1個，便於測試觀察成功的連線數
worker_processes 1;

upstream tomcats {
	server 192.168.1.173:8080 max_conns=2;
	server 192.168.1.174:8080 max_conns=2;
	server 192.168.1.175:8080 max_conns=2;
}

upstream tomcats {
	server 192.168.1.173:8080 weight=6 slow_start=60
	server 192.168.1.174:8080 weight=2;
	server 192.168.1.175:8080 weight=2;
}

upstream tomcats {
	server 192.168.1.173:8080 down;
	server 192.168.1.174:8080 weight=1;
	server 192.168.1.175:8080 weight=1;
}

upstream tomcats {
	server 192.168.1.173:8080 backup;
	server 192.168.1.174:8080 weight=1;
	server 192.168.1.175:8080 weight=1;
}

max_fails=2 fail_timeout=15s

upstream tomcats {
	#server 192.168.1.173:8080 max_fails=2 failtimeout=1s;
	server 192.168.1.190:8080;
	#server 192.168.1.174:8080 weight=1;
	server 192.168.1.175:8080 weight=1;keepalive 32
}

server {
	listen 80;
	server_name: www.tomcats.com;

	location / {
		proxy_pass http://tomcats;
		proxy_http_version 1.1;
		proxy_set_header Connection "";
	}
}

location /files {
	alias /home/imooc;
	# expires 10s;
	# expires @22h30m;
	# expires -1h;
	# expires epoch;
	# expires off;
	expires max;
}

# proxy_cache_path 設定快取目錄#
# keys_zone 設定共用記憶體以及佔用空間大小
# max_size 設定快取大小
# inactive 超過此時間則被清理
# use_temp_path 臨時目錄，使用後會影響nginx效能
proxy_cache_path /usr/local/nginx/upstream_cache keys_zone=mycache:5m max_size=1g inactive=1m use_temp_path=off;

location / {
	proxy_pass http://tomcats;
	# 啟用快取，和keyS_zone一致
	proxy_cache mycache;
	# 針對200和304狀態碼快取時間為8小時
	proxy_cache_valid 200 304 8h;

./configure 
--prefix=/usr/local/nginx 
--pid-path=/var/run/nginx/nginx.pid 
--lock-path=/var/lock/nginx.lock 
--error-log-path=/var/Log/nginx/error.log 
--http-log-path=/var/log/nginx/access.log 
--with-http_gzip_static_module 
--http-client-body-temp-path=/var/temp/nginx/client 
--http-proxy-temp-path=/var/temp/nginx/proxy 
--http-fastcgi-temp-path=/var/temp/nginx/fastcgi 
--http-uwsgi-temp-path=/var/temp/nginx/uwsgi 
--http-scgi-temp-path=/var/temp/nginx/scgi 
--with-http_ssl_module

make
make install

server {
	listen 443;
	server_name www.imoocdsp.com;

	# 開啟ssl
	ssl on;
	# 設定ssl證書
	ssl_certificate	1_www.imoocdsp.com_bundle
	# 設定證書祕鑰
	ssl_certificate_key 2_www.imoocdsp.com.key;
	
	# ssl對談
	ssl_session_cache shared:SSL:1m
	# ssl對談超時時間
	ssl_session_timeout 5m;

	# 設定加密套件，寫法遵循 openssl 標準
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!
	ssl_prefer_server_ciphers on;

	location / {
		proxy_pass http://tomcats/;
		index index.html index.htm;
	}
}