超實用的Nginx常見設定合集分享

http {
    # ....
    # 封禁IP
    deny 192.168.4.3; 
    deny 31.42.145.0/24; 
    deny 51.12.35.0/24;
}

location / { 
  # block one workstation 
  deny    192.168.1.1; 
  # allow anyone in 192.168.1.0/24 
  allow   192.168.1.0/24; 
  # drop rest of the world 
  deny    all; 
}

# nginx.conf中設定轉發伺服器資訊
upstream web {
    server 192.168.37.2 weight=1 max_fails=3 fail_timeout=20s;
    server 192.168.37.3 weight=1 max_fails=3 fail_timeout=20s;
}

# default.conf中開啟負載均衡
location / {
    proxy_pass http://web/;
}

location / {
    autoindex on;
    autoindex_exact_size on;
    autoindex_localtime on;
}

# nginx伺服器
location /static {
    alias /public;
}
 
# window伺服器
location ^~ /static {
    alias "D:\public\靜態資源";
}

http {
    # 開啟gzip
    gzip on;

    # 是否在http header中新增Vary: Accept-Encoding，建議開啟
    gzip_vary on;

    # 啟用gzip壓縮的最小檔案，小於設定值的檔案將不會壓縮
    gzip_min_length 1k;

    gzip_proxied any;

    # gzip 壓縮級別，1-9，數位越大壓縮的越好，也越佔用CPU時間
    gzip_comp_level 6;

    # 設定壓縮所需要的緩衝區大小
    gzip_buffers 16 8k;

    # 設定gzip的版本
    gzip_http_version 1.1;

    # 進行壓縮的檔案型別。javascript有多種形式，後面的圖片壓縮不需要的可以自行刪除
    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
}

server {
    location / {
        #允許跨域請求的域，*代表所有 
        add_header 'Access-Control-Allow-Origin' *; 
        #允許帶上cookie請求 
        add_header 'Access-Control-Allow-Credentials' 'true'; 
        #允許請求的方法，比如 GET / POST / PUT / DELETE 
        add_header 'Access-Control-Allow-Methods' *; 
        #允許請求的header 
        add_header 'Access-Control-Allow-Headers' *;
    }
}

server {
    location ~*/(js|image|css) {
        # 檢測*.autofelix.cn的請求，如果檢測是無效的，直接返回403
        valid_referers *.autofelix.cn; 
        if ($invalid_referer) {
            return 403;
        }
     }
}

# nginx.conf中設定吞吐量
upstream web {
    server 192.168.37.3 weight=1;keepalive 32;
}

# default.conf中設定
location / {
     proxy_pass http://tomcats;
     proxy_http_version 1.1;
     proxy_set_header Connection "";
}

server {
    # 監聽的埠號
    listen 80;
    
    # 強制跳轉
    rewrite ^(.*)$ https://$host$1 permanent;
}
 
server {
    # 監聽的埠號
    listen       443;
    # 主機名
    server_name www.520web.cn;
    # 開啟ssl驗證
    ssl on;
    # 字元集
    charset utf-8;
    # 存取的根目錄
    root   /var/www/html;
    # 錯誤頁面
    error_page  404    ...404檔案路徑;
    
    # 圖片視訊靜態資源快取到使用者端時間
    location ~ .*.(jpg|jpeg|gif|png|ico|mp3|mp4|swf|flv){
      expires 10d;
    }
    
    # js/css靜態資源快取到使用者端時間
    location ~ .*.(js|css){
      expires 5d;
    }
    
    # ssl的相關設定，pem檔案的地址
    ssl_certificate  ...pem檔案的絕對路徑;
    # key檔案的絕對路徑
    ssl_certificate_key  ...key檔案的絕對路徑;
    # 斷開重連時間
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    # ssl協定
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    
    # 首頁存取的檔案
    location / {
        index  index.php index.html index.htm;
    }

    # php-ftm設定
    location ~ .php$ {
        fastcgi_pass   127.0.0.1:9000;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        include        fastcgi_params;
    }
}