Nginx 官网 (opens new window)

安装依赖

1. 安装 gcc-c++编译器

yum install -y zlibyum gcc-c++
yum install -y openssl openssl-devel zlib-devel

2. 安装 pcre 包

yum install -y pcre pcre-devel

3. 安装 zlib 包

yum install -y zlib zlib-devel

安装 nginx

1. 下载nginx 包 (opens new window)

wget http://nginx.org/download/nginx-1.22.0.tar.gz

2. 解压

tar -zxvf /usr/local/nginx-1.21.0

3. 进入刚解压的目录

cd nginx-1.21.0

4. 使用 nginx 默认配置安装

./configure  --with-http_stub_status_module --with-http_ssl_module

5. 安装

make;
make install;

6. 查找安装路径

whereis nginx

7. 进入目录

cd /usr/local/nginx/sbin

8. 直接启动 nginx

./nginx
# 查看是否启动
ps -ef | grep nginx

9. 使用systemctl管理

创建文件 /etc/systemd/system/nginx.service

[Unit]
Description=The NGINX HTTP and reverse proxy server
After=syslog.target network.target remote-fs.target nss-lookup.target
 
[Service]
Type=forking
PIDFile=/usr/local/nginx/logs/nginx.pid
ExecStartPre=/usr/local/nginx/sbin/nginx -t
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/usr/local/nginx/sbin/nginx -s reload
ExecStop=/usr/local/nginx/sbin/nginx -s stop
PrivateTmp=true
 
[Install]
WantedBy=multi-user.target

启动重启命令

sudo systemctl enable nginx
sudo systemctl start nginx

配置

nginx https 配置示例1（拷贝自阿里云）

#以下属性中，以ssl开头的属性表示与证书配置有关。
server {
    listen 443 ssl;
    #配置HTTPS的默认访问端口为443。
    #如果未在此处配置HTTPS的默认访问端口，可能会造成Nginx无法启动。
    #如果您使用Nginx 1.15.0及以上版本，请使用listen 443 ssl代替listen 443和ssl on。
    server_name yourdomain.com; #需要将yourdomain.com替换成证书绑定的域名。
    root html;
    index index.html index.htm;
    ssl_certificate cert/cert-file-name.pem;  #需要将cert-file-name.pem替换成已上传的证书文件的名称。
    ssl_certificate_key cert/cert-file-name.key; #需要将cert-file-name.key替换成已上传的证书密钥文件的名称。
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    #表示使用的加密套件的类型。
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #表示使用的TLS协议的类型。
    ssl_prefer_server_ciphers on;
    location / {
        root html;  #站点目录。
        index index.html index.htm;
    }
}

nginx https 配置示例2

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       80;
        server_name  localhost;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            root   html;
            index  index.html index.htm;
        }

        location /family/ {
            proxy_pass http://family;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }


    # HTTPS server
    #
    server {
        listen       443 ssl;
        server_name  api.family.farmergao.cn;

        ssl_certificate      cert/api.family.farmergao.cn.pem;
        ssl_certificate_key  cert/api.family.farmergao.cn.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        #ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_prefer_server_ciphers  on;

        location /family/ {
            proxy_pass http://family;
        }
    }

    upstream family {
        server  localhost:8080 max_fails=5 fail_timeout=100;
    }
}