nginx常用配置文件

[nginx.conf](/usr/uploads/2022/06/3201737934.conf "nginx.conf")
[default.conf](/usr/uploads/2022/06/1784947589.conf)
[http反向代理](/usr/uploads/2022/06/158763798.conf)
[http转https反向代理](/usr/uploads/2022/06/643847485.conf)
[http转https部份反向代理](/usr/uploads/2022/06/4141187561.conf)

include 可复制直接使用
```
proxy_http_version 1.1;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Real-PORT $remote_port;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_set_header Scheme $scheme;
proxy_set_header Server-Protocol $server_protocol;
proxy_set_header Server-Name $server_name;
proxy_set_header Server-Addr $server_addr;
proxy_set_header Server-Port $server_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
add_header Cache-Control no-store;
#启用SSL反向代理
proxy_ssl_server_name on;

client_max_body_size 10m;
client_body_buffer_size 128k;

proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 32 4k;
proxy_busy_buffers_size 64k;
```
nginx大文件上传配置
```
client_body_buffer_size 10m;  #缓存区大小
client_max_body_size 100m;    #上传文件的最大值
client_body_temp_path temp/;  #临时文件存放路径。只有当上传的请求体超出缓存区大小时，才会写到临时文件中

#并给临时存放文件的目录设置权限：chmod 775 temp/
```
```
#默认nginx.conf
#user  nobody;
worker_processes  auto;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;

events {
    worker_connections  1024;
}

http {
#    include       /etc/nginx/mime.types;
    include       mime.types;
    default_type  application/octet-stream;

include     conf/*.conf;
    #include /etc/nginx/conf.d/*.conf;

#log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

#access_log  logs/access.log  main;

sendfile        on;
    #tcp_nopush     on;

#keepalive_timeout  0;
    keepalive_timeout  65;

#gzip  on;
}
```
```
#默认server 
server {
listen       80;
server_name  localhost;

#charset koi8-r;

#access_log  logs/host.access.log  main;

location / {
root   html;
index  index.html index.htm;
}

#error_page  404              /404.html;

# redirect server error pages to the static page /50x.html
#
error_page   500 502 503 504  /50x.html;
location = /50x.html {
root   html;
}

# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ \.php$ {
#    proxy_pass   http://127.0.0.1;
#}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ \.php$ {
#    root           html;
#    fastcgi_pass   127.0.0.1:9000;
#    fastcgi_index  index.php;
#    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
#    include        fastcgi_params;
#}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
#    deny  all;
#}
}

# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
#    listen       8000;
#    listen       somename:8080;
#    server_name  somename  alias  another.alias;

#    location / {
#        root   html;
#        index  index.html index.htm;
#    }
#}

# HTTPS server
#
#server {
#    listen       443 ssl;
#    server_name  localhost;

#    ssl_certificate      cert.pem;
#    ssl_certificate_key  cert.key;

#    ssl_session_cache    shared:SSL:1m;
#    ssl_session_timeout  5m;

#    ssl_ciphers  HIGH:!aNULL:!MD5;
#    ssl_prefer_server_ciphers  on;

#    location / {
#        root   html;
#        index  index.html index.htm;
#    }
#}
```
```
#https 反向代理

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}
upstream srv2 {
    # Connect IP:Port
    server 127.0.0.1:5200 weight=5 max_fails=3 fail_timeout=30s;
    keepalive 16;
}

server {
    listen 80;
    server_name d.vxera.com;
    #将请求转成https
    return 301 https://$server_name$request_uri;
}
server
{
    listen 443 ssl http2;
    server_name d.vxera.com;

#SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
    #error_page 404/404.html;
    ssl_certificate    /cert/fullchain.crt;
    ssl_certificate_key    /cert/key.key;
    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
    add_header Strict-Transport-Security "max-age=31536000";
    error_page 497  https://$host$request_uri;

#SSL-END

#ERROR-PAGE-START  错误页配置，可以注释、删除或修改
    #error_page 404 /404.html;
    #error_page 502 /502.html;
    #ERROR-PAGE-END

#PROXY-START
    location / {
        proxy_http_version 1.1;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Real-PORT $remote_port;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header Scheme $scheme;
        proxy_set_header Server-Protocol $server_protocol;
        proxy_set_header Server-Name $server_name;
        proxy_set_header Server-Addr $server_addr;
        proxy_set_header Server-Port $server_port;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
        add_header Cache-Control no-store;
        proxy_pass http://srv2;

}
    #PROXY-END

#禁止访问的文件或目录
    location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)
    {
        return 404;
    }

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    {
        expires      30d;
        #error_log /dev/null;
        #access_log /dev/null;
    }

location ~ .*\.(js|css)?$
    {
        expires      12h;
        #error_log /dev/null;
        #access_log /dev/null;
    }
    #access_log  /www/wwwlogs/127.0.0.1.log;
    #error_log  /www/wwwlogs/127.0.0.1.error.log;
}
```
```
#http反向代理

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}
upstream srv3 {
    # Connect IP:Port
    server 127.0.0.1:5200 weight=5 max_fails=3 fail_timeout=30s;
    keepalive 16;
}

server
{
    listen 80 ssl http2;
    server_name d.vxera.com;

#ERROR-PAGE-START  错误页配置，可以注释、删除或修改
    #error_page 404 /404.html;
    #error_page 502 /502.html;
    #ERROR-PAGE-END

client_max_body_size 10m;
        client_body_buffer_size 128k;

proxy_connect_timeout 90;
        proxy_send_timeout 90;
        proxy_read_timeout 90;
        proxy_buffer_size 4k;
        proxy_buffers 32 4k;
        proxy_busy_buffers_size 64k;

proxy_pass http://srv3;

}
    #PROXY-END

#禁止访问的文件或目录
    location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)
    {
        return 404;
    }

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    {
        expires      30d;
        #error_log /dev/null;
        #access_log /dev/null;
    }

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}
upstream srv1 {
    # Connect IP:Port
    server 127.0.0.1:5200 weight=5 max_fails=3 fail_timeout=30s;
    keepalive 16;
}

server {
    listen 80;
    server_name d.vxera.com;
    #将请求转成https
    return 301 https://$server_name$request_uri;
}

server
{
    listen 443 ssl http2;
    server_name d.vxera.com;
    index index.php index.html index.htm default.php default.htm default.html;
    root /data/wookteam/public;

#SSL-END

#ERROR-PAGE-START  错误页配置，可以注释、删除或修改
    #error_page 404 /404.html;
    #error_page 502 /502.html;
    #ERROR-PAGE-END

#PROXY-START
    location  /xxx {
        proxy_http_version 1.1;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Real-PORT $remote_port;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header Scheme $scheme;
        proxy_set_header Server-Protocol $server_protocol;
        proxy_set_header Server-Name $server_name;
        proxy_set_header Server-Addr $server_addr;
        proxy_set_header Server-Port $server_port;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
        add_header Cache-Control no-store;
        proxy_pass http://srv1;

}

#PROXY-END

#禁止访问的文件或目录
    location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)
    {
        return 404;
    }

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    {
        expires      30d;
        #error_log /dev/null;
        #access_log /dev/null;
    }

添加新评论

仅有一条评论

朱哥:
location ~*^.+$ {
proxy_pass http://127.0.0.1:5001; #请求转向mysvr 定义的服务器列表
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#add_header Cache-Control no-store;
#add_header Pragma no-cache;
#proxy_http_version 1.1; #使用长连接必须使HTTP 1.1以上
#proxy_set_header Connection "Keep-Alive";
}

2022年07月05日 | 回复

nginx常用配置文件

添加新评论

仅有一条评论

关于博主

文章分类

最受欢迎的文章

最近回复

其它