CentOS安装Nginx并添加为systemd托管程序

最新推荐文章于 2025-02-17 10:27:45 发布

转载最新推荐文章于 2025-02-17 10:27:45 发布 · 980 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：https://blog.youkuaiyun.com/ming2316780/article/details/86505594

问题解决专栏收录该内容

29 篇文章

订阅专栏

本文详细介绍了Nginx的安装过程及高级配置方法，包括如何编译安装Nginx，配置systemd进行服务管理，设置负载均衡，以及HTTPS证书配置等关键步骤。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

https://blog.youkuaiyun.com/z920954494/article/details/52132125

./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module 
--with-http_v2_module --with-http_realip_module --with-stream --with-stream_ssl_module

# 安装到/usr/local/nginx目录启用ssl 支持http2 启用real ip 用来实现四层协议的转发代理或负载均衡等用于流代理服务器与ssl/tls 协议工作必要的支持

make

make install

使用systemctl接管nginx

vim /etc/systemd/system/nginx.service

# 保存下面的值

[Unit]
Description=nginx - high performance web server
After=network.target remote-fs.target nss-lookup.target

[Service]
Type=forking
ExecStart=/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf
ExecReload=/usr/local/nginx/sbin/nginx -s reload
ExecStop=/usr/local/nginx/sbin/nginx -s stop

[Install]
WantedBy=multi-user.target

刷新 systemctl 查看nginx状态

systemctl daemon-reload
systemctl status nginx

nginx 配置测试服务

upstream strategyService{
    server 127.0.0.1:8101;
    server 127.0.0.1:8102;
    server 127.0.0.1:8103;
    server 127.0.0.1:8104;
}
proxy_next_upstream error;
server {
    listen       80;
    server_name  localhost;

    #charset koi8-r;

    #access_log  logs/host.access.log  main;

    location / {
        root   html;
        index  index.html index.htm;
    }

    #error_page  404              /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }

    location /strategyService{
        real_ip_header X-Forwarded-For;
        rewrite ^/strategyService/(.*)$ /$1 break;
        proxy_pass http://strategyService;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
    }
}

nginx 配置证书

upstream ssService {
    server 127.0.0.1:8000;
    server 127.0.0.1:8001;
    server 127.0.0.1:8002;
    server 127.0.0.1:8003;
}

server {
    listen       443;
    server_name  nsquant.com;

    #charset koi8-r;

    #access_log  logs/host.access.log  main;
    ssl on;
    ssl_certificate  /usr/local/nginx/conf/cert/2608100_www.nsquant.com.pem;
    ssl_certificate_key /usr/local/nginx/conf/cert/2608100_www.nsquant.com.key;

    ssl_session_timeout 5m;


    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    ssl_prefer_server_ciphers on;

    location / {
        root   /myServices/web_nsj;
        index  index.html index.htm;
        try_files $uri $uri/ /index.html;
    }

    #error_page  404              /404.html;

    location /strategyShop {
        real_ip_header X-Forwarded-For;
        rewrite ^/strategyShop/(.*)$ /$1 break;
        proxy_pass http://ssService;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
    }
}

server {
    listen 80;
    server_name nsquant.com;
    rewrite ^(.*)$ https://$host$1 permanent;
}