nginx配置示例

user  www www;

worker_processes 1;

error_log  /home/logdir/nginx_error.log  crit;

pid        /usr/local/nginx/logs/nginx.pid;

#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 51200;

events
	{
		use epoll;
		worker_connections 51200;
	}

http
	{
		include       mime.types;
		default_type  application/octet-stream;

		server_names_hash_bucket_size 128;
		client_header_buffer_size 32k;
		large_client_header_buffers 4 32k;
		client_max_body_size 50m;

		sendfile on;
		tcp_nopush     on;

		keepalive_timeout 60;

		tcp_nodelay on;

		fastcgi_connect_timeout 300;
		fastcgi_send_timeout 300;
		fastcgi_read_timeout 300;
		fastcgi_buffer_size 64k;
		fastcgi_buffers 4 64k;
		fastcgi_busy_buffers_size 128k;
		fastcgi_temp_file_write_size 256k;
		fastcgi_intercept_errors on;		

		gzip on;
		gzip_min_length  1k;
		gzip_buffers     4 16k;
		gzip_http_version 1.0;
		gzip_comp_level 2;
		gzip_types       text/plain application/x-javascript text/css application/xml;
		gzip_vary on;

		upstream root1 {
				
			server 192.168.1.103:80;
		}

		#limit_zone  crawler  $binary_remote_addr  10m;

server
	{
		listen       80;
		server_name 192.168.1.103;
		index index.html index.htm index.php;
		root  /home/wwwroot/root1;

		#error_page 404 = /404.php;
		#ssl on;
		#ssl_certificate /usr/local/nginx/conf/server.crt;
		#ssl_certificate_key /usr/local/nginx/conf/server.key;
######################################################

		location ~ .*\.(dat|sql)?$
		{
                root /home/wwwroot/root1;
                deny all;
                }

#################################################

# xieye
location /script {
  alias /home/wwwroot/include/script;
}  
location ~ ^/script/(.+\.php)$ {
  alias /home/wwwroot/include/script/$1;


}


		location ~ .*\.(php|php5)?$
			{
				fastcgi_pass  unix:/tmp/php-cgi.sock;
				fastcgi_index index.php;
				include fcgi.conf;
			}
				error_page 404 = /404.php;

		location /status {
			stub_status on;
			access_log   off;
		}

		location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
			{
				expires      30d;
			}

		location ~ .*\.(js|css)?$
			{
				expires      12h;
			}

		log_format  access  '$remote_addr - $remote_user [$time_local] "$request" '
             '$status $body_bytes_sent "$http_referer" '
             '"$http_user_agent" $http_x_forwarded_for';
		access_log  /home/logdir/access.log  access;
	}

server
        {
                listen       443;
                server_name 192.168.1.103;
                index index.html index.htm index.php;
                root  /home/wwwroot/root1;
                ssl on;
                ssl_certificate /usr/local/nginx/conf/server.crt;
                ssl_certificate_key /usr/local/nginx/conf/server.key;
		ssl_client_certificate /usr/local/nginx/conf/ca.crt;
		#keepalive_timeout	70;
		#ssl_verify_depth	2;		

		#ssl_verify_client on;
		#proxy_set_header	X-Forwarded-Proto https;
		#ssl_prefer_server_ciphers on;
		#ssl_session_timeout	5m;
		error_page 404 = /404.php;
	
############################################################

                location ~ .*\.(php|php5)?$ 
		{				
				proxy_pass	http://root1;	
				proxy_set_header SSL_CERT $ssl_client_cert;

                        
                                fastcgi_pass  unix:/tmp/php-cgi.sock;
                                fastcgi_index index.php;
                                include fcgi.conf;
				fastcgi_param HTTPS on;
			}
			#error_page	404	/404.php;
				
			

                location /status {
                        stub_status on;
                        access_log   off;
                }

                location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
                        {
                                expires      30d;
                        }

                location ~ .*\.(js|css)?$
                        {
                                expires      12h;
                        }

                log_format  access2  '$remote_addr - $remote_user [$time_local] "$request" '
             '$status $body_bytes_sent "$http_referer" '
             '"$http_user_agent" $http_x_forwarded_for';
                access_log  /home/logdir/access.log  access;
        }


include vhost/*.conf;
}