Linux下Nginx安装并开启SSL
一. 下载nginx
下载后上传至服务器。PS: 博主使用的Nginx版本为: nginx-1.23.4.tar.gz
二. 安装Nginx所需要的环境
1. 安装gcc-c++
yum install gcc-c++
yum install -y openssl openssl-devel
2. 安装pcre包
yum install -y pcre pcre-devel
3. 安装zlib包
yum install -y zlib zlib-devel
三. 安装Nginx
1. 解压Nginx包
# 进入Nginx包存放的目录
tar -zxvf nginx-1.23.4.tar.gz
2. 进入Nginx目录配置
使用nginx默认配置,并配置ssl
./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-stream
3. 编译安装
make
make install
4. 启动
# 进入nginx的sbin目录下
# 启动
./nginx
# 重启
./nginx -s reload
# 停止
./nginx -s stop
5. 设置开机自启动
把nginx加入到系统服务中
vim /etc/systemd/system/nginx.service
加入下面内容
[Unit]
Description=Nginx HTTP Server
After=network.target
[Service]
Type=forking
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/usr/local/nginx/sbin/nginx -s reload
ExecStop=/usr/local/nginx/sbin/nginx -s stop
PrivateTmp=true
[Install]
WantedBy=multi-user.target
重新加载systemd 配置文件
systemctl daemon-reload
6. Nginx 常用命令
# 启动
systemctl start nginx
# 关闭
systemctl stop nginx
# 重启
systemctl restart nginx
# 查看状态
systemctl status nginx
# 设置开机自启动
systemctl enable nginx
#关闭开机自启动
systemctl disabled nginx
四. nginx配置文件
1. 配置SSL证书
server {
listen 443 ssl;
server_name www.baidu.com;
ssl_certificate www.baidu.com.pem; # SSL证书pem文件
ssl_certificate_key www.baidu.com.key; # SSL证书key证书
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://localhost:9031/; #转发请求的地址
proxy_connect_timeout 6000; #链接超时设置
proxy_read_timeout 6000; #访问接口超时设置
}
location /profile/ {
alias /home/gvdphome/uploadPath/;
expires 30d; # 设置缓存过期时间
add_header Cache-Control "public";
}
}
2. 设置静态资源代理路径
server {
listen 443 ssl; # 端口
server_name www.baidu.com; # 域名
ssl_certificate www.baidu.com.pem; # SSL证书pem文件
ssl_certificate_key www.baidu.com.key; # SSL证书key证书
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://localhost:9031/; #转发请求的地址
proxy_connect_timeout 6000; #链接超时设置
proxy_read_timeout 6000; #访问接口超时设置
}
# 静态资源代理路径
location /profile/ {
alias /home/baidu/uploadPath/;
expires 30d; # 设置缓存过期时间
add_header Cache-Control "public";
}
}
3. 配置80端口
server {
listen 80; # 端口
server_name www.baidu.com; # 域名
location / {
proxy_pass http://localhost:9012/; #转发请求的地址
proxy_connect_timeout 6000; #链接超时设置
proxy_read_timeout 6000; #访问接口超时设置
}
}
4. 代理VUE项目
server {
listen 80;
server_name admin.baidu.com;
#charset koi8-r;
#access_log logs/host.access.log main;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://localhost:90;
root html;
index index.html index.htm;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
# 90端口资源
server {
listen 90;
# gzip config 前端加载慢问题这样解决
gzip on;
gzip_min_length 1k;
gzip_comp_level 9;
gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
gzip_vary on;
gzip_disable "MSIE [1-6]\.";
server_name localhost; # 这里配置域名
location / {
root "/home/baidu/vue/dist";
try_files $uri $uri/ @router;
index index.html index.htm;
error_page 405 =200 http://$host$request_uri;
}
#代理后端接口
location /api/ {
proxy_pass http://localhost:9010/; #转发请求的地址
proxy_connect_timeout 6000; #链接超时设置
proxy_read_timeout 6000; #访问接口超时设置
}
location @router {
rewrite ^.*$ /index.html last;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}