nginx配置案例说明

1、配置https

首先安装openssl和openssl-devel

#yum install openssl

#yum install openssl-devel

然后就是自己颁发证书给自己

#cd /usr/local/nginx/conf

#openssl genrsa -des3 -out server.key 1024

#openssl req -new -key server.key -out server.csr

#openssl rsa -in server.key -out server_nopwd.key

#openssl x509 -req -days 365 -in server.csr -signkey server_nopwd.key -out server.crt

server {

    listen 443;

    ssl on;

    ssl_certificate  /usr/local/nginx/conf/server.crt;

    ssl_certificate_key  /usr/local/nginx/conf/server_nopwd.key;

}

2、nginx七层代理-fastcgi，upstream可以配置多条做负载均衡

upstream cgiphp {

    server 127.0.0.1:8000 max_fails=1 fail_timeout=60s weight=100;

}

server {

    server_name up.me;

    index index.html index.htm index.php;

    root /home/leicc;

    location ~ \.php {

        fastcgi_index index.php;

        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        fastcgi_param QUERY_STRING $query_string;

        fastcgi_param REQUEST_METHOD $request_method;

        fastcgi_param CONTENT_TYPE $content_type;

        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_param SCRIPT_NAME $fastcgi_script_name;

        fastcgi_param REQUEST_URI $request_uri;

        fastcgi_param DOCUMENT_URI $document_uri;

        fastcgi_param DOCUMENT_ROOT $document_root;

        fastcgi_param SERVER_PROTOCOL $server_protocol;

        fastcgi_param GATEWAY_INTERFACE CGI/1.1;

        fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;

        fastcgi_param REMOTE_ADDR $remote_addr;

        fastcgi_param REMOTE_PORT $remote_port;

        fastcgi_param SERVER_ADDR $server_addr;

        fastcgi_param SERVER_PORT $server_port;

        fastcgi_param SERVER_NAME $server_name;

        fastcgi_param REDIRECT_STATUS 200;

        fastcgi_pass cgiphp;

    }

}

3、nginx七层代理-http，upstream可以配置多条做负载均衡

upstream httppool {

    server 127.0.0.1:80 max_fails=1 fail_timeout=60s weight=100;

}

server {

    server_name proxy.me;

    index index.html index.htm index.php;

    location / {

        proxy_pass http://httppool;

        proxy_set_header Host $proxy_host;

        proxy_set_header X-Real-IP $remote_addr;

        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    }

}