十二周二次课(3月13日)
12.6 Nginx安装

blob.png

  • cd /usr/local/src

  • wget http://nginx.org/download/nginx-1.12.1.tar.gz

  • tar zxvf nginx-1.12.1.tar.gz

  • cd nginx-1.12.1

  • ./configure --prefix=/usr/local/nginx

  • make && make install

安装完成

blob.png


编辑配置文件及启动脚本

vim /etc/init.d/nginx   复制如下内容。来源https://coding.net/u/aminglinux/p/aminglinuxbook/git/blob/master/D15Z/etc_init.d_nginx 

#!/bin/bash
# chkconfig: - 30 21
# description: http service.
# Source Function Library
. /etc/init.d/functions
# Nginx Settings
NGINX_SBIN="/usr/local/nginx/sbin/nginx"
NGINX_CONF="/usr/local/nginx/conf/nginx.conf"
NGINX_PID="/usr/local/nginx/logs/nginx.pid"
RETVAL=0
prog="Nginx"
start() 
{
echo -n $"Starting $prog: "
mkdir -p /dev/shm/nginx_temp
daemon $NGINX_SBIN -c $NGINX_CONF
RETVAL=$?
echo
return $RETVAL
}
stop() 
{
echo -n $"Stopping $prog: "
killproc -p $NGINX_PID $NGINX_SBIN -TERM
rm -rf /dev/shm/nginx_temp
RETVAL=$?
echo
return $RETVAL
}
reload()
{
echo -n $"Reloading $prog: "
killproc -p $NGINX_PID $NGINX_SBIN -HUP
RETVAL=$?
echo
return $RETVAL
}
restart()
{
stop
start
}
configtest()
{
$NGINX_SBIN -c $NGINX_CONF -t
return 0
}
case "$1" in
start)
start
;;
stop)
stop
;;
reload)
reload
;;
restart)
restart
;;
configtest)
configtest
;;
*)
echo $"Usage: $0 {start|stop|reload|restart|configtest}"
RETVAL=1
esac
exit $RETVAL



  • chmod 755 /etc/init.d/nginx

  • chkconfig --add nginx

  • chkconfig nginx on

  • cd /usr/local/nginx/conf/

  • mv nginx.conf nginx.conf.bak

  • vim nginx.conf   写入如下内容。来源https://coding.net/u/aminglinux/p/aminglinux-book/git/blob/master/D15Z/nginx.conf

user nobody nobody;
worker_processes 2;
error_log /usr/local/nginx/logs/nginx_error.log crit;
pid /usr/local/nginx/logs/nginx.pid;
worker_rlimit_nofile 51200;
events
{
use epoll;
worker_connections 6000;
}
http
{
include mime.types;
default_type application/octet-stream;
server_names_hash_bucket_size 3526;
server_names_hash_max_size 4096;
log_format combined_realip '$remote_addr $http_x_forwarded_for [$time_local]'
' $host "$request_uri" $status'
' "$http_referer" "$http_user_agent"';
sendfile on;
tcp_nopush on;
keepalive_timeout 30;
client_header_timeout 3m;
client_body_timeout 3m;
send_timeout 3m;
connection_pool_size 256;
client_header_buffer_size 1k;
large_client_header_buffers 8 4k;
request_pool_size 4k;
output_buffers 4 32k;
postpone_output 1460;
client_max_body_size 10m;
client_body_buffer_size 256k;
client_body_temp_path /usr/local/nginx/client_body_temp;
proxy_temp_path /usr/local/nginx/proxy_temp;
fastcgi_temp_path /usr/local/nginx/fastcgi_temp;
fastcgi_intercept_errors on;
tcp_nodelay on;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 8k;
gzip_comp_level 5;
gzip_http_version 1.1;
gzip_types text/plain application/x-javascript text/css text/htm 
application/xml;
server
{
listen 80;
server_name localhost;
index index.html index.htm index.php;
root /usr/local/nginx/html;
location ~ .php$ 
{
include fastcgi_params;
fastcgi_pass unix:/tmp/php-fcgi.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /usr/local/nginx/html$fastcgi_script_name;

}
}


  • /usr/local/nginx/sbin/nginx -t //检查是否有语法错误

  • /etc/init.d/nginx start //启动nginx服务

  • netstat -lntp |grep 80 //查看监听80端口状态

blob.png

blob.png


blob.png


测试php

vi /usr/local/nginx/html/1.php //加入如下内容
<?php
echo "test php scripts.";
?>
curl localhost/1.php //测试能否解析php

blob.png




12.7 默认虚拟主机

blob.png


  • mkdir /usr/local/nginx/conf/vhost //创建虚拟主机目录

  • cd /usr/local/nginx/conf/vhost

  • vim default.conf //加入如下内容
    server
    {
    listen 80 default_server; #有这个标记的就是默认虚拟主机
    server_name aaa.com;
    index index.html index.htm index.php;
    root /data/wwwroot/default;
    }

  • mkdir -p /data/wwwroot/default/

  • echo “This is a default site.”>/data/wwwroot/default/index.html

  • /usr/local/nginx/sbin/nginx -t

  • /usr/local/nginx/sbin/nginx -s reload #重新加载nginx

支持include语法

blob.png




12.8 Nginx用户认证

blob.png

  • vim /usr/local/nginx/conf/vhost/test.com.conf #写入如下内容
    server
    {
    listen 80;
    server_name test.com;
    index index.html index.htm index.php;
    root /data/wwwroot/test.com;

    location /            #用户认证相关配置
    {
    auth_basic "Auth";
    auth_basic_user_file /usr/local/nginx/conf/htpasswd;
    }
    }

创建密码文件

  • yum install -y httpd #安装apache,如果没有,有可跳过该步

  • /usr/local/apache2.4/bin/htpasswd -c /usr/local/nginx/conf/htpasswd Auth_user #指定用户认证的用户名


blob.png    

blob.png


  • /usr/local/nginx/sbin/nginx -t

  • /usr/local/nginx/sbin/nginx -s reload #重新加载nginx

  • mkdir /data/wwwroot/test.com

  • echo “test.com”>/data/wwwroot/test.com/index.html

blob.png


测试

通过curl测试
curl -x127.0.0.1:80 test.com -I #状态码为401说明需要验证
curl -uAuth_user:123 -x127.0.0.1:80 test.com -I #访问状态码变为200

blob.png



针对目录的用户认证
location /admin/
{
auth_basic "Auth";
auth_basic_user_file /usr/local/nginx/conf/htpasswd;
}

blob.png

blob.png

blob.png


针对某个页面的用户认证
location ~ admin.php
{
auth_basic "Auth";
auth_basic_user_file /usr/local/nginx/conf/htpasswd; 
}

blob.png

blob.png





12.9 Nginx域名重定向

blob.png

  • 编辑/usr/local/nginx/conf/vhost/test.com.conf为如下内容:
    server
    {
    listen 80;
    server_name test.com test1.com test2.com;
    index index.html index.htm index.php;
    root /data/wwwroot/test.com;
    if ($host != 'test.com' ) {
    rewrite ^/(.*)$ http://test.com/$1 permanent;
    }
    }

blob.png


blob.png

测试

blob.png

blob.png

blob.png
扩展
nginx.conf 配置详解  http://www.ha97.com/5194.html 
http://my.oschina.net/duxuefeng/blog/34880 
nginx rewrite四种flag  http://www.netingcn.com/nginx-rewrite-flag.html 
http://unixman.blog.51cto.com/10163040/1711943