nginx.conf

最新推荐文章于 2025-08-11 22:27:14 发布

weixin_34081595

最新推荐文章于 2025-08-11 22:27:14 发布

阅读量53

点赞数

CC 4.0 BY-SA版权

文章标签：运维 php python

原文链接：https://my.oschina.net/jack088/blog/3035852

2019独角兽企业重金招聘Python工程师标准>>>

user  nginx;
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

#    log_format access '$HTTP_X_REAL_IP - $remote_user [$time_local] "$request" '
#    '$status $body_bytes_sent "$http_referer" '
#    '"$http_user_agent" $HTTP_X_Forwarded_For';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;
	
	#2M为允许的文件大小
	client_max_body_size 2m;

    # gzip压缩功能设置
    gzip  on;
    gzip_min_length 1k;
    gzip_buffers 4 16k;
    gzip_http_version 1.0;
    gzip_comp_level 6;
    gzip_types text/plain application/javascript application/x-javascript text/javascript text/xml text/css image/jpeg;
    gzip_disable "MSIE [1-6]\.";
    gzip_vary on;

#设定请求缓冲
    client_header_buffer_size    128k;
    large_client_header_buffers  4 128k;


    include /etc/nginx/conf.d/*.conf;
}

server
    {
        listen 80 default backlog=2048;
        #listen [::]:80;

    	listen      443 ssl;
        ssl_certificate /etc/nginx/conf.d/***.com_bundle.crt;
        ssl_certificate_key /etc/nginx/conf.d/***.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
        ssl_prefer_server_ciphers on;
# rewrite ^(.*) https://$host$1 permanent;

        server_name ***.com;
        index index.html index.htm index.php default.html default.htm default.php;
        root  /usr/share/nginx/html/***;
        location / {
          if (!-e $request_filename) {
           rewrite  ^(.*)$  /index.php?s=$1  last;
           break;
          }
       }
        location ~ \.php {
          #fastcgi_pass 172.17.0.3:9000;
          fastcgi_pass 172.17.0.3:9000;
          fastcgi_index index.php;
          include fastcgi_params;
          set $real_script_name $fastcgi_script_name;
          if ($fastcgi_script_name ~ "^(.+?\.php)(/.+)$") {
              set $real_script_name $1;
              #set $path_info $2;
           }
        fastcgi_param SCRIPT_FILENAME $document_root$real_script_name;
        fastcgi_param SCRIPT_NAME $real_script_name;
        #fastcgi_param PATH_INFO $path_info;
        }
        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }
 
    }

server {
    listen 80;
    server_name  ***.com;
root  /usr/share/nginx/html/***;
index  index.html index.htm;

        location / {
            root   /usr/share/nginx/html/***;
#			autoindex on;
#            index  index.html index.htm;
			try_files $uri /index.html;
			}

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/local/nginx/html;
    }
}

server {
#    listen 443 ssl;
#    listen 80;
    server_name  ***.com;
    index  index.html index.htm;
#    ssl_certificate /usr/local/nginx/conf/certs/***.cn_bundle.crt;
#    ssl_certificate_key /usr/local/nginx/conf/certs/***.cn.key;

#    ssl_session_timeout  5m;
#    ssl_protocols  SSLv2 SSLv3 TLSv1;
#    ssl_ciphers  HIGH:!aNULL:!MD5;
#    ssl_prefer_server_ciphers   on;
#    ssl_session_tickets on;

    location / {
        proxy_connect_timeout   3;
        proxy_send_timeout      30;
        proxy_read_timeout      30;
#        proxy_pass http://localhost:8090;
	proxy_pass http://172.17.0.1:8090;
#        proxy_set_header Host $host:8090;
	proxy_set_header Host 172.17.0.1:8090;
        proxy_http_version 1.1;  
        proxy_set_header Upgrade $http_upgrade;  
        proxy_set_header Connection "Upgrade";
        proxy_set_header X-real-ip $remote_addr;
        proxy_set_header X-Forwarded-For $remote_addr;

    }

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/local/nginx/html;
    }
}
#server {
#    listen 80;
#    server_name ***.com;
#    rewrite ^/(.*) https://$server_name$1 permanent; #跳转到Https
#}

ps: nginx 反向代理，400 bad request https://blog.youkuaiyun.com/weixin_34149796/article/details/88194499 https://blog.youkuaiyun.com/u011655220/article/details/79583341

转载于:https://my.oschina.net/jack088/blog/3035852