Nginx 部署文档

cd /usr/local/srcwget https://nginx.org/download/nginx-1.28.2.tar.gz

yum install -y openssl openssl-devel libxml2 libxml2-devel libxslt libxslt-devel gd gd-devel pcre pcre-devel perl-ExtUtils-Embed

cd /usr/local/srctar zxf nginx-1.28.2.tar.gzcd nginx-1.28.2# 解决无法找到 openssl 问题sed -i '/ngx_feature_libs/s#R/usr/local/lib #R/usr/local/lib64 #g' auto/lib/openssl/confsed -i '/ngx_feature_libs/s#L/usr/local/lib #L/usr/local/lib64 #g' auto/lib/openssl/conf# 编译./configure --prefix=/usr/local/nginx --with-compat --with-debug --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_degradation_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_perl_module=dynamic --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_mp4_module --with-http_xslt_module=dynamic --with-mail=dynamic --with-mail_ssl_module --with-pcre --with-pcre-jit --with-stream=dynamic --with-stream_ssl_module --with-stream_ssl_preread_module --with-threadsmake -j2# 安装make install

mkdir -p /data/nginx_data/mkdir -p /data/logs/nginxcd /usr/local/nginxmv conf /data/nginx_data/ln -s /data/nginx_data/conf confmkdir -p conf/conf.drm -rf logsln -s /data/logs/nginx logsmkdir -p /data/nginx_data/certsln -s /data/nginx_data/certs certs

cat <<"EOF" | tee -a /etc/profile# nginxexport NGINX_HOME=/usr/local/nginxexport PATH=$NGINX_HOME/sbin:$PATHEOFsource /etc/profile

cd /usr/local/nginx/confcat <<EOF | tee nginx.confuser root ;worker_processes auto;worker_cpu_affinity auto;events {    use epoll;    worker_connections  65535;    accept_mutex on;    multi_accept on;}http {    include       mime.types;    default_type  application/octet-stream;    underscores_in_headers on;    server_tokens off;    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '                      '$status $body_bytes_sent "$http_referer" '                      '"$http_user_agent" "$http_x_forwarded_for" $request_time '                      '$upstream_response_time $upstream_addr $upstream_status';    access_log logs/access.log main;    sendfile        on;    #tcp_nopush     on;    proxy_buffer_size  128k;    proxy_buffers   32 32k;    proxy_busy_buffers_size 128k;    keepalive_timeout  65;    gzip  on;    gzip_proxied any;    #gzip_min_length    1k;    gzip_comp_level     6;    #gzip_buffers     4 32k;    gzip_http_version 1.1;    gzip_types text/plain text/css text/xml text/javascript application/xml application/javascript application/json application/octet-stream image/jpeg image/gif image/png;    include conf.d/*.conf;}EOF

cd /data/nginx_datacat <<EOF | tee nginx.service[Unit]Description=The nginx HTTP and reverse proxy serverAfter=network-online.target remote-fs.target nss-lookup.targetWants=network-online.target[Service]Type=forkingPIDFile=/usr/local/nginx/logs/nginx.pid# Nginx will fail to start if /run/nginx.pid already exists but has the wrong# SELinux context. This might happen when running `nginx -t` from the cmdline.# https://bugzilla.redhat.com/show_bug.cgi?id=1268621ExecStartPre=/usr/bin/rm -f /run/nginx.pidExecStartPre=/usr/local/nginx/sbin/nginx -t -c /usr/local/nginx/conf/nginx.confExecStart=/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.confExecReload=/usr/local/nginx/sbin/nginx -s reload -c /usr/local/nginx/conf/nginx.confExecStop=/usr/local/nginx/sbin/nginx -s stop -c /usr/local/nginx/conf/nginx.confKillSignal=SIGQUITTimeoutStopSec=5KillMode=processPrivateTmp=true[Install]WantedBy=multi-user.targetEOFcp nginx.service /usr/lib/systemd/system/

systemctl daemon-reloadsystemctl enable nginx --nowsystemctl status nginx

server {  listen 80;  location / {    alias /usr/share/nginx/html/dist/;    try_files $uri $uri/ /index.html;    index index.html index.htm;  }}

server {  listen 443 ssl;  listen 80;  server_name api.rucjohn.tech;  index index.html index.htm index.php;  ssl_prefer_server_ciphers on;  ssl_protocols TLSv1 TLSv1.1 TLSV1.2;  ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;  ssl_certificate "/usr/local/nginx/certs/server.crt";  ssl_certificate_key "/usr/local/nginx/certs/server.key";  location ^~ /api/v1/simple {    proxy_pass http://127.0.0.243;    proxy_set_header Host $host;    proxy_set_header X-Real-IP $remote_addr;    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;    proxy_set_header X-Forwarded-Proto $scheme;  }}

upstream mysql {    hash $remote_addr consistent;    server 127.0.0.240:3306;}server {    listen 13306 so_keepalive=on;    proxy_pass mysql;}

server {    listen       443 ssl;    server_name  ai.rucjohn.tech;    location /api/ {        proxy_set_header Host $http_host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;        proxy_pass http://10.211.55.101:9090;        # 取消缓冲        proxy_buffering off;        # 关闭代理缓存        proxy_cache off;        add_header X-Accel-Buffering "no";    }}