nginx conf文件

最新推荐文章于 2025-09-01 21:57:34 发布

转载最新推荐文章于 2025-09-01 21:57:34 发布 · 56 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：https://my.oschina.net/huangguangsheng/blog/2231449

文章标签：

#运维 #后端 #python

2019独角兽企业重金招聘Python工程师标准>>>

注：文件中所以ip和域名都是假的

该安装方式为解压方式，非yum命令方式。

https免费证书申请地址：https://i-mscp.net/thread/16005-letsencrypt-fehler/

nginx.conf 文件

#user www www;
worker_processes 2;
error_log logs/error.log info;
pid /usr/local/nginx/nginx.pid;
worker_rlimit_nofile 65535;
events {

    #代理类型
    use epoll;
    worker_connections 65535;
}
http {
    include       mime.types;
    default_type application/octet-stream;
      log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                                   '$status $body_bytes_sent "$http_referer" '
                                   '"$http_user_agent" "$http_x_forwarded_for"';
    access_log logs/access.log main;
    server_names_hash_bucket_size 128;
    client_header_buffer_size 512k;
    large_client_header_buffers 4 512k;
    client_body_buffer_size    30m;
    client_max_body_size 100m;
    server_tokens off;
    ignore_invalid_headers   on;
    recursive_error_pages    on;
    sendfile                 on;
    tcp_nopush     on;
    tcp_nodelay    on;
    keepalive_timeout 65;
    gzip on;
    gzip_min_length 1k;
    gzip_http_version 1.0;
    gzip_comp_level 2;
    gzip_types       text/plain application/x-javascript text/css application/xml;
    #后台服务器地址
    upstream trucktest{
//这里有几种方式 :

//1、轮询（默认）,

//2、指定权重,

//3、IP绑定 ip_hash(每个请求按访问ip的hash结果分配，这样每个访客固定访问一个后端服务器，可以解决session的问题)

//4、fair（第三方）按后端服务器的响应时间来分配请求，响应时间短的优先分配。

//5、url_hash（第三方）按访问url的hash结果来分配请求，使每个url定向到同一个后端服务器，后端服务器为缓存时比较有效。

ip_hash;
        server 10.70.1111.1113:8080 weight=10;;
        server 10.70.1111.1115:8080;
#fair;
    }

    #监听端口
    server {
        listen 80;
        #域名（对外访问，不写默认是配置的服务器对应的ip）
        server_name ity.miian.com;
        #永久重定向到 https 站点
        return      301 https://$server_name$request_uri;

    }

    server {
        listen 82;

#（对外访问的ip，不写默认是配置的服务器对应的ip）
        server_name 219.17.2295.19;
        location ~* / {
          proxy_pass http://modeltest;
                            proxy_set_header        Host $host:82;
                            proxy_set_header        X-Real-IP $remote_addr;
                            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                            client_max_body_size 400m;
                            proxy_connect_timeout 600;
                            proxy_send_timeout 600;
                            proxy_read_timeout 600;

                            proxy_set_header Upgrade $http_upgrade;
                            proxy_set_header Connection "upgrade";
                            proxy_set_header X-Forwarded-Proto $scheme;
                    }
        access_log /usr/local/nginx/logs/218.17.125.14.log;
    }

    upstream modeltest{
      server 10.70.1111.2111:8080;
      server 10.70.1111.2114:8080;
    }

##https请求方式，要添加证书信息
    server {
        #对外端口
        listen       43343;
#对外域名
        server_name ity.miian.com;

#https免费证书

ssl   on;
        ssl_certificate       ../sslkey/1_ity.miian.com_bundle.crt;
        ssl_certificate_key   ../sslkey/2_ity.miian.com.key;
        ssl_session_timeout   5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv2 SSLv3;
        ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;
        ssl_prefer_server_ciphers on;


        #========模型接口===========#
        location ~* /miian/testvo {
          proxy_pass http://modeltest;
        }

        location ~* / {
          proxy_pass http://trucktest;
                            proxy_set_header        Host $host:80;
                            proxy_set_header        X-Real-IP $remote_addr;
                            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
                            client_max_body_size 400m;
                            proxy_connect_timeout 600;
                            proxy_send_timeout 600;
                            proxy_read_timeout 600;

                            proxy_set_header Upgrade $http_upgrade;
                            proxy_set_header Connection "upgrade";
                            proxy_set_header X-Forwarded-Proto $scheme;
                    }


        access_log /usr/local/nginx/logs/ity.miian.com.log;

    }
}