Nginx的搭建与核心配置方法

目录

• 一.Nginx是什么？
1.Nginx概述
2.Nginx模块与作用
3.Nginx三大作用：反向代理、负载均衡、动静分离
• 二.Nginx和Apache的差异
• 三.安装Nginx
• 1.编译安装
• 2.yum安装
• 四.Nginx的信号使用
• 五.Nginx的核心配置指令
1.访问状态统计配置
2.基于授权的访问控制
3.基于客户端访问控制
5.基于IP的nginx虚拟主机
6.基于端口的nginx虚拟主机

systemctl stop firewalld
systemctl disable firewalld
setenforce 0
# 将压缩包传入到/opt目录下
cd /opt
wget http://nginx.org/download/nginx-1.18.0.tar.gz

yum -y install gcc pcre-devel openssl-devel zlib-devel openssl  openssl-devel

useradd -M -s /sbin/nologin nginx

tar xf nginx-1.18.0.tar.gz 
cd nginx-1.18.0/
mkdir /apps/nginx -p
./configure --prefix=/apps/nginx \
--user=nginx \
--group=nginx \
--with-http_ssl_module \
--with-http_v2_module \
--with-http_realip_module \
--with-http_stub_status_module \
--with-http_gzip_static_module \
--with-pcre \
--with-stream \
--with-stream_ssl_module \
--with-stream_realip_module
make -j2 && make install
chown -R nginx.nginx /apps/nginx

ln -s /apps/nginx/sbin/nginx /usr/sbin/

vim /usr/lib/systemd/system/nginx.service
[Unit]
Description=nginx - high performance web server
Documentation=http://nginx.org/en/docs/
After=network-online.target remote-fs.target nss-lookup.target
Wants=network-online.target
[Service]
Type=forking
PIDFile=/apps/nginx/logs/nginx.pid
ExecStart=/apps/nginx/sbin/nginx -c /apps/nginx/conf/nginx.conf
ExecReload=/bin/kill -s HUP $MAINPID
ExecStop=/bin/kill -s TERM $MAINPID
[Install]
WantedBy=multi-user.target

systemctl daemon-reload          #重新加载配置
systemctl enable --now nginx     #开机自启并立即启动
systemctl status nginx.service   #查看服务状态（验证

Centos7 需要安装epel源
cd /etc/yum.repos.d
vim epel.repo
[epel]
name=epel
baseurl=https://mirrors.aliyun.com/epel/$releasever/x86_64
gpgcheck=0
yum install -y epel-release
yum install nginx -y

nginx -h      
#查询nginx信号使用规则

cd /usr/local/nginx/sbin
#根据安装路径自由修改/apps/nginx/sbin也可
nginx -V

cd /usr/local/nginx/conf/              #/apps/nginx/conf同理
cp nginx.conf nginx.conf.bak           #备份
vim nginx.conf
    server {
        listen       80;
        server_name  www.clj.com;
        charset utf-8;
        #access_log  logs/host.access.log  main;
        location / {
            root   html;
            index  index.html index.htm;
        }
        ##添加 stub_status 配置
        location /status {    ##访问位置为/status
            stub_status on;    ##打开状态统计功能
            access_log off;    ##关闭此位置的日志记录
        }

systemctl restart nginx.service

yum install -y httpd-tools
#安装工具
htpasswd -c /usr/local/nginx/passwd.db zhangsan
#生成用户密码认证文件（注意路径
chown nginx /usr/local/nginx/passwd.db 
chmod 400 /usr/local/nginx/passwd.db
#修改属性和赋予执行权限

vim /usr/local/nginx/conf/nginx.conf
#路径/apps/nginx/conf/nginx.conf
 location / {
            root   html;
            index  index.html index.htm;
            #添加认证配置
            auth_basic "secret";     #设置密码提示框文字信息
            auth_basic_user_file /usr/local/nginx/passwd.db;
        }

nginx -t
systemctl restart nginx.service 
curl 192.168.79.210

vim /usr/local/nginx/conf/nginx.conf
#注意路径/apps/nginx/conf/nginx.conf
        location / {
            root   html;
            index  index.html index.htm;
            auth_basic "secret";
            auth_basic_user_file /usr/local/nginx/passwd.db;
            # 添加控制规则
            deny 192.168.80.77;     #拒绝访问的客户端IP
            allow all;       #允许其他所有客户端访问
        }

systemctl restart nginx.service 

192.168.79.220访问
curl 192.168.79.210

192.168.79.210访问
curl 192.168.79.210
192.168.79.230访问
curl 192.168.79.210

echo "192.168.79.210 www.zhuo.com www.xunizhuo.com" >> /etc/hosts

mkdir -p /var/www/html/zhuo/
mkdir -p /var/www/html/xunizhuo/
echo "<h1>www.zhuo.com</h1>" > /var/www/html/zhuo/index.html
echo "<h1>www.xunizhuo.com</h1>" > /var/www/html/xunizhuo/index.html

cd /usr/local/nginx/conf           #/apps/nginx/conf路径同理 
cp nginx.conf.bak nginx.conf       #还原主配置文件

vim /usr/local/nginx/conf/nginx.conf
#/apps/nginx/conf/nginx.conf同理
    server {
        listen       80;
        server_name  www.xunizhuo.com;      #设置域名   
        charset utf-8;         #设置网页字符集
        access_log  logs/xunizhuo.com.access.log;   #设置日志名
        location / {
            root   /var/www/html/xunizhuo;     #设置www.bxb.com的工作目录
            index  index.html index.htm;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
    server {
        listen       80;   
        server_name  www.zhuo.com;      #设置域名
        charset utf-8;         #设置网页字符集
        access_log  logs/zhuo.com.access.log;   #设置日志名
        location / {
            root   /var/www/html/zhuo;     #设置www.bxb.com的工作目录
            index  index.html index.htm;
        }

systemctl restart nginx.service
curl www.zhuo.com
curl www.xunizhuo.com 

ifconfig ens33:0 192.168.79.211/24
vim /usr/local/nginx/conf/nginx.conf
#/apps/nginx/conf/nginx.conf同理
    server {
        listen       192.168.79.210:80;    #修改监听的为ip
        server_name  www.xunizhuo.com;
        charset utf-8;
        access_log  logs/xunizhuo.com.access.log;
        location / {
            root   /var/www/html/xunizhuo;
            index  index.html index.htm;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
    server {
        listen       192.168.79.211:80;    #修改监听的为ip
        server_name  www.zhuo.com;
        charset utf-8;
        access_log  logs/zhuo.com.access.log;
        location / {
            root   /var/www/html/zhuo;
            index  index.html index.htm;
        }

nginx -t
systemctl restart nginx.service

curl 192.168.79.210:80
curl 192.168.79.211:80

vim /usr/local/nginx/conf/nginx.conf
#/apps/nginx/conf/nginx.conf同理
    server {
        listen       192.168.79.210:666;    #修改监听的为ip的666端口
        server_name  www.xunizhuo.com;
        charset utf-8;
        access_log  logs/xunizhuo.com.access.log;
        location / {
            root   /var/www/html/xunizhuo;
            index  index.html index.htm;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
    server {
        listen       192.168.79.211:888;       #修改监听的为ip的888端口
        server_name  www.zhuo.com;
        charset utf-8;
        access_log  logs/zhuo.com.access.log;
        location / {
            root   /var/www/html/zhuo;
            index  index.html index.htm;
        }

nginx -t
systemctl restart nginx.service

curl 192.168.79.210:666
curl 192.168.79.211:888

详解基于centos7搭建Nginx网站服务器（包含虚拟web主机的配置）
CentOS上搭建Nginx+Mono运行asp.net环境的配置方法
Nginx服务器上搭建图片缓存服务的基本配置解析
安装配置php-fpm来搭建Nginx+PHP的生产环境
Nginx服务器搭建和基本配置详解
Nginx搭建流媒体FLV视频服务器配置示例
使用Nginx反向代理与proxy_cache缓存搭建CDN服务器的配置方法