Nginx 通用配置详解nginx.conf

user root;
worker_processes  4;
worker_cpu_affinity 0001 0010 0100 1000;
worker_rlimit_nofile 65535;

events {
    use epoll;
    #max_connections = worker_processes * worker_connections[不能超过用户打开文件的最大数量限制]
    worker_connections 2048;
    multi_accept on;
}

http {
    include mime.types;
    default_type application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    map $time_iso8601 $logdate{
            '~^(?<ymd>\d{4}-\d{2}-\d{2})' $ymd;
            default 'date-not-found';
    }

    # 配置http全局日志
    access_log /home/sqyr/local/nginx-1.22.1/nginx/logs/access-$logdate.log main;
    error_log  /home/sqyr/local/nginx-1.22.1/nginx/logs/error.log warn;

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    server_tokens off;
    reset_timedout_connection on;
    client_max_body_size 512m;
    client_body_buffer_size 2048k;
    proxy_buffering  on; 
    proxy_buffer_size  512k; 
    proxy_buffers 64 128k;
    proxy_connect_timeout 120s;
    proxy_send_timeout 240s;
    proxy_read_timeout 240s;

    #client_header_buffer_size 4k;
    #client_header_timeout 15;
    #client_body_timeout 15;
    #send_timeout 600;   
    #fastcgi配置
    #fastcgi_connect_timeout 600;
    #fastcgi_send_timeout 600;
    #fastcgi_read_timeout 600;
    #fastcgi_buffer_size 64k;
    #fastcgi_buffers 4 64k;
    #fastcgi_busy_buffers_size 128k;
    #fastcgi_temp_file_write_size 128k;
    fastcgi_temp_path /home/sqyr/local/nginx-1.22.1/nginx/fastcgi_temp;

    #gzip配置
    gzip on;
    gzip_disable "msie6";
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_buffers 4 32k;
    gzip_http_version 1.1;
    gzip_min_length 1k;
    gzip_proxied expired no-cache no-store private auth;
    gzip_types text/plain application/javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
     
    #监听443
    server {
        listen 443 ssl;
        server_name xx域名;
        ssl_certificate /home/sqyr/local/pem/xx证书.pem;
        ssl_certificate_key /home/sqyr/local/pem/xx证书.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1.2;
        ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-HACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
        ssl_prefer_server_ciphers on;
        #location ~* \.(jpg|jpeg|gif|css|png|js|ico|html)$ {
           #access_log off;
           #expires max;
        #}
        location / {
            add_header Access-Control-Allow-Origin *;
            root  /home/sqyr/local/project/ubox-front;
            autoindex on;
            index  index.html index.htm;
            try_files $uri $uri/ /index.html;
        }
        location = /ubox-client/jzybase/oziGJ1g2W6.txt {
            default_type    text/html;
            return 200 "xxcode";
        }
        location /oziGJ1g2W6.txt {
            default_type    text/html;
            return 200 "xxcode";
        }
        location /ubox-server/ {
            default_type application/json;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://127.0.0.1:8001/ubox-server/;
        }
        location /ubox-client/ {
            default_type application/json;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://127.0.0.1:8003/ubox-client/;
        }

        location /jzy-api/{
            default_type application/json;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://127.0.0.1:8001/ubox-server/;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root html;
        }

        # 配置应用服务日志
        # access_log /home/sqyr/local/nginx-1.22.1/nginx/logs/www-gzsqyr-com-$logdate.log main;
        # error_log  /home/sqyr/local/nginx-1.22.1/nginx/logs/www-gzsqyr-com-error.log warn; 
  }
}