Nginx 常用命令

1
2
3
4
5


sudo nginx -t                 # 检测配置文件是否有错误
sudo systemctl status nginx   # nginx 当前的运行状态
sudo systemctl reload nginx   # 重新加载 nginx 配置
sudo systemctl restart nginx  # 重启 nginx
sudo ln -s /etc/nginx/sites-available/example.com /etc/nginx/sites-enabled/ # Link website

配置

端口

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13


server {
  # Use HTTP protocol
  listen 80;
  
  # Use HTTPS protocol
  listen 443 ssl;
  
  # Listen on port 80 using IPv6
  listen [::]:80;
  
  # Listen on port 80 using **only** IPv6
  listen [::]:80 ipv6only=on;
}

域名

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16


server {
  # Listen to example.com
  server_name example.com;
  
  # Listen to multiple domains
  server_name example.com www.example.com;
  
  # Listen to all sub-domains
  server_name *.example.com;
  
  # Listen to all top-level domains
  server_name example.*;
  
  # Listen to unspecified hostnames (listens to IP address itself)
  server_name "";
}

静态资源

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20


server {
    listen 80;
    server_name example.com;

    root /path/to/website;
    # root /www/data/ for example

    # If there's no 'root' inside, it will look for /www/data/index.html
    location / {
    }

    # If there's no 'root' inside, it will look for /www/data/images/index.html
    location /images/ {
    }

    # Since there's 'root' inside, it will look for /www/media/videos/index.html
    location /videos/ {
        root /www/media;
    }
}

重定向

301 Permanent

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13


server {
    # Redirect www.example.com to example.com
    listen 80;
    server_name www.example.com;
    return 301 http://example.com$request_uri;
}

server {
    # Redirect http to https
    listen 80;
    server_name example.com;
    return 301 https://example.com$request_uri;
}

302 Temporary

1
2
3
4
5


server {
    listen 80;
    server_name yourdomain.com;
    return 302 http://otherdomain.com;
}

反向代理

正向代理和反向代理
系统内部要访问外部网络时，统一通过一个代理服务器把请求转发出去，在外部网络看来就是代理服务器发起的访问，此时代理服务器实现的是正向代理；
当外部请求进入系统时，代理服务器把该请求转发到系统中的某台服务器上，对外部请求来说，与之交互的只有代理服务器，此时代理服务器实现的是反向代理。
简单来说，正向代理是代理服务器代替系统内部来访问外部网络的过程，反向代理是外部请求访问系统时通过代理服务器转发到内部服务器的过程。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23


server {
    listen 80;
    server_name example.com;
    
    location / {
        proxy_pass http://0.0.0.0:3000;
        # where 0.0.0.0:3000 is your Node.js Server bound on 0.0.0.0 listing on port 3000
    }
}

upstream node_list {
    server 0.0.0.0:3000;
    # where 0.0.0.0:3000 is your Node.js Server bound on 0.0.0.0 listing on port 3000
}

server {
    listen 80;
    server_name example.com;

    location / {
      proxy_pass http://node_list;
    }
}

WebSockets

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17


upstream node_list {
    server 0.0.0.0:3000;
}

server {
    listen 80;
    server_name example.com;
    
    location / {
        proxy_pass http://node_list;
        proxy_redirect off;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
    }
}

HTTPS

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18


server {
    listen 443 ssl http2;
    server_name example.com;

    ssl on;

    ssl_certificate /path/to/cert.pem;
    ssl_certificate_key /path/to/privkey.pem;

    ssl_stapling on;
    ssl_stapling_verify on;
    ssl_trusted_certificate /path/to/fullchain.pem;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_session_timeout 1d;
    ssl_session_cache shared:SSL:50m;
    add_header Strict-Transport-Security max-age=15768000;
}

HTTP 重定向到 HTTPS

1
2
3
4
5


server {
    listen 80;
    server_name yourdomain.com;
    return 301 https://$host$request_uri;
}

负载均衡

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14


upstream node_list {
    server 0.0.0.0:3000;
    server 0.0.0.0:4000;
    server 127.155.142.421;
}

server {
    listen 80;
    server_name example.com;
    
    location / {
        proxy_pass http://node_list;
    }
}

二级域名配置

添加解析

进入域名解析后台
添加记录
- 主机名：即二级域名的名字
- 解析记录：A
- 记录值：IP 地址，跟主域名一样配置

修改配置文件

 1
 2
 3
 4
 5
 6
 7
 8
 9
10


server {
    listen 80;
    server_name ai.example.com;

    location / {
        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   Host      $http_host;
        proxy_pass         http://0.0.0.0:10080;
    }
}