nginx安装

时间：05-21来源：作者：点击数：25

前言：

Nginx是一个异步框架的Web服务器，也可以用作反向代理，负载平衡器和 HTTP缓存。该软件由Igor Sysoev 创建，并于2004年首次公开发布。同名公司成立于2011年，以提供支持。 Nginx是一款免费的开源软件，根据类BSD许可证的条款发布。

安装编译工具、依赖包

[root@Mike-VM-Node-172_31_225_214 ~]#  yum -y install gcc gcc-c++ autoconf automake make zlib zlib-devel openssl openssl-devel pcre pcre-devel wget vim tar curl gd-devel

以上安装的是一些主要的依赖包，具体可根据自己情况或者报错信息提示安装或修改

创建用户和组

[root@Mike-VM-Node-172_31_225_214 ~]# useradd -M -s /sbin/nologin nginx

新建的用户组和用户主要是在编译配置的时候指定nginx运行的用户和用户组,这样指定后以后配置使用也方便

下载解压nginx

[root@Mike-VM-Node-172_31_225_214 ~]# cd /usr/local/
[root@Mike-VM-Node-172_31_225_214 /usr/local]# wget http://nginx.org/download/nginx-1.18.0.tar.gz
[root@Mike-VM-Node-172_31_225_214 /usr/local]# tar zxvf nginx-1.18.0.tar.gz 
[root@Mike-VM-Node-172_31_225_214 /usr/local]# rm -rf nginx-1.18.0.tar.gz

编译安装

[root@Mike-VM-Node-172_31_225_214 /usr/local]# cd nginx-1.18.0/
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx-1.18.0]# ./configure --user=nginx --group=nginx --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_v2_module --with-http_gzip_static_module --with-http_sub_module  --with-http_realip_module --with-http_image_filter_module --with-stream
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx-1.18.0]# make && make install

添加环境变量

[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx-1.18.0]# ln -sv /usr/local/nginx/sbin/nginx /usr/local/sbin

设置 systemctl 脚本启动

[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx-1.18.0]# cd 
[root@Mike-VM-Node-172_31_225_214 ~]# vim /usr/lib/systemd/system/nginx.service

[Unit]
Description=nginx
After=network.target
[Service]
Type=forking
PIDFile=/usr/local/nginx/logs/nginx.pid
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/usr/local/nginx/sbin/nginx -s reload
ExecStop=/usr/local/nginx/sbin/nginx -s stop
PrivateTmp=true
[Install]
WantedBy=multi-user.target

[root@Mike-VM-Node-172_31_225_214 ~]#

启动 NGINX和添加防火墙 80 443 端口

[root@Mike-VM-Node-172_31_225_214 ~]# systemctl start nginx
[root@Mike-VM-Node-172_31_225_214 ~]# firewall-cmd --zone=public --add-port=80/tcp --permanent
[root@Mike-VM-Node-172_31_225_214 ~]# firewall-cmd --zone=public --add-port=443/tcp --permanent
[root@Mike-VM-Node-172_31_225_214 ~]# firewall-cmd --reload

如果iptables防火墙
[root@Mike-VM-Node-172_31_225_214 ~]# vim /etc/sysconfig/iptables

-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT

[root@Mike-VM-Node-172_31_225_214 ~]# systemctl restart iptables

修改nginx默认主配置文件

[root@Mike-VM-Node-172_31_225_214 ~]# 
[root@Mike-VM-Node-172_31_225_214 ~]# cd /usr/local/nginx/conf/
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf]# cat nginx.conf

user nginx nginx;
worker_processes auto;

error_log  logs/error.log ;
worker_rlimit_nofile 65535;
pid        logs/nginx.pid;

events {
    use epoll;
    worker_connections  65535;
}


http {
    include       mime.types;
    default_type  application/octet-stream;
    log_format upstream2 '$proxy_add_x_forwarded_for $remote_user [$time_local] "$request" $http_host'
        '$body_bytes_sent "$http_referer" "$http_user_agent" $ssl_protocol $ssl_cipher'
        '$request_time [$status] [$upstream_status] [$upstream_response_time] "$upstream_addr"';
   
   access_log  logs/access.log;
   
   server_names_hash_bucket_size 128;
   server_names_hash_max_size    1024;
   client_header_buffer_size 32k;
   large_client_header_buffers 4 32k;
   client_max_body_size 50m;

   sendfile        on;
   tcp_nopush      on;
   server_tokens   off;
   tcp_nodelay     on;
   keepalive_timeout        120;

   proxy_connect_timeout    1000s;
   proxy_read_timeout       2000;
   proxy_send_timeout       2000;
   proxy_buffer_size        128k;
   proxy_buffers            4 256k;
   proxy_busy_buffers_size  256k;
   proxy_redirect           off;
   proxy_hide_header        Vary;
   proxy_set_header         Accept-Encoding '';
   proxy_set_header         Host   $host;
   proxy_set_header         Referer $http_referer;
   proxy_set_header         X-Real-IP  $remote_addr;
   proxy_set_header         X-Forwarded-For $proxy_add_x_forwarded_for;


   fastcgi_connect_timeout 300;
   fastcgi_send_timeout 300;
   fastcgi_read_timeout 300;
   fastcgi_buffer_size 64k;
   fastcgi_buffers 4 64k;
   fastcgi_busy_buffers_size 128k;
   fastcgi_temp_file_write_size 128k;

   gzip on;
   gzip_buffers 16 8k;
   gzip_comp_level 6;
   gzip_http_version 1.1;
   gzip_min_length 256;
   gzip_proxied any;
   gzip_vary on;
   gzip_types
   text/xml application/xml application/atom+xml application/rss+xml application/xhtml+xml image/svg+xml
   text/javascript application/javascript application/x-javascript
   text/x-json application/json application/x-web-app-manifest+json
   text/css text/plain text/x-component
   font/opentype application/x-font-ttf application/vnd.ms-fontobject
   image/x-icon image/jpeg image/gif image/png;
   gzip_disable  "msie6";


   #If you have a lot of static files to serve through Nginx then caching of the files' metadata (not the actual files' contents) can save some latency.
   #open_file_cache max=1000 inactive=20s;
   #open_file_cache_valid 30s;
   #open_file_cache_min_uses 2;
   #open_file_cache_errors on;



    server {
        listen   80;
        server_name  _;
        rewrite ^(.*) https://www.baidu.com/$1 permanent;

    ####跨域问题##################################    
        location ~* \.(eot|ttf|woff|svg|otf)$ {
          add_header Access-Control-Allow-Origin *;
        }

    ####PHP虚拟配置###############################
        #location ~ [^/]\.php(/|$) {
        #    root html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        #    include        fastcgi.conf;
        #}
    }

   ####默认配置SSL证书#############################
   #server {
   #
   #     listen   443 default_server;
   #     server_name  _;
   #     ssl on;
   #     ssl_certificate ssl/test.com/chao.crt;
   #     ssl_certificate_key ssl/test.com/chao.key;
   #     ssl_session_timeout 1d;
   #     ssl_session_cache shared:SSL:50m;
   #     ssl_session_tickets off;
   #     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
   #     rewrite ^(.*) https://www.baidu.com/$1 permanent;
   #}

##########################vhost#####################################
include  conf.d/*.conf;
}

[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf]# 
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf]# nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf]# nginx -s reload

默认80端口已经被我重定向到百度首页，创建网站站点需要新建虚拟文件如下

[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf]# mkdir conf.d
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf]# cd conf.d/
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]# 
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]# vim test.conf

server
    {
        listen 80;
        server_name test.com;
        index index.html index.php index.htm default.html default.htm default.php;
        root  /www/nginx/html;

         error_log  /data/logs/nginx_log/test.com/error.log;
         access_log  /data/logs/nginx_logs/test.com/access.log;
        

        location ~* \.(eot|otf|ttf|woff|woff2|svg)$ {
        add_header Access-Control-Allow-Origin *;
        }


        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }


    }

[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]#
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]# nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]# nginx -s reload
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]#

如果有使用PHP代码是这样配置，如下

[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]# vim php.conf

server
    {
        listen 80;
        server_name php.com;
        index index.html index.php index.htm default.html default.htm default.php;
        root  /www/nginx/html;

         error_log  /data/logs/nginx_log/php.com/error.log;
         access_log  /data/logs/nginx_logs/php.com/access.log;
        
        
       location ~ [^/]\.php(/|$)
        {
            try_files $uri =404;
            fastcgi_pass  127.0.0.1:9000;
            fastcgi_index index.php;
            include fastcgi.conf;
        set $real_script_name $fastcgi_script_name;
        if ($fastcgi_script_name ~ "^(.+?\.php)(/.+)$") {
        set $real_script_name $1;
        set $path_info $2;
       }
      fastcgi_param SCRIPT_FILENAME $document_root$real_script_name;
      fastcgi_param SCRIPT_NAME $real_script_name;
      fastcgi_param PATH_INFO $path_info;
      }

        location ~* \.(eot|otf|ttf|woff|woff2|svg)$ {
        add_header Access-Control-Allow-Origin *;
        }


        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }


    }
    
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]#
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]# nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]# nginx -s reload
[root@Mike-VM-Node-172_31_225_214 /usr/local/nginx/conf/conf.d]#