Nginx网站服务

[root@web01 /server/tools]# vim /etc/yum.repos.d/nginx.repo
[nginx-stable]
name=nginx stable repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=1    （#安装有问题改成0或注释掉）
enabled=1
gpgkey=https://nginx.org/keys/nginx_signing.key
module_hotfixes=true
[root@web01 /server/tools]# yum install nginx -y

[root@web01 /server/tools]# yum install nginx -y
[root@web01 /etc/yum.repos.d]# systemctl start nginx

[root@web01 ~]# mkdir -p /server/tools
[root@web01 /server/tools]# wget http://nginx.org/download/nginx-1.18.0.tar.gz

[root@web01 /server/tools]# yum install -y openssl-devel pcre-devel
[root@web01 /server/tools]#  ./configure --prefix=/root/nginx --user==nginx --group=nginx --with-http_ssl_module --with-http_stub_status_module

[root@web01 /server/tools]# tar -xf nginx-1.18.0.tar.gz 
[root@web01 /server/tools]# ls
nginx-1.18.0  nginx-1.18.0.tar.gz
[root@web01 /server/tools]# cd nginx-1.18.0/
[root@web01 /server/tools/nginx-1.18.0]# ls
auto  CHANGES  CHANGES.ru  conf  configure  contrib  html  LICENSE  man  README  src

[root@web01 ~]# cat /etc/nginx/nginx.conf 
#1.配置文件主区域
user  nginx;                                            --- 定义worker进程管理的用户    
worker_processes  1;                                    --- 开启几个worker进程（等于CPU核心数或核心数的2倍）

error_log  /var/log/nginx/error.log warn;               --- 错误日志目录
pid        /var/run/nginx.pid;                          --- pid文件位置
#2.配置文件事件区域
events { 
    worker_connections  1024;                           --- worker请求接收最大请求数
}
#3.配置http区域
http {
    include       /etc/nginx/mime.types;                 --- 加载一个文件类型的配置文件
    default_type  application/octet-stream;              --- 指定默认识别文件类型

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '  --- 定义日志格式
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;             --- 定义日志路径

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;                      --- 定义超时时间

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;            --- 加载站点配置文件
}

[root@web01 ~]# egrep -v "(^$|#)" /etc/nginx/conf.d/default.conf 

#4.sever区域配置
server { 
    listen       80;                             --- 指定监听端口
    server_name  localhost;                      --- 指定网站的域名
    location / {
        root   /usr/share/nginx/html;            --- 定义站点目录的路径  
        index  index.html index.htm;             --- 定义网站首页文件
    }
    error_page   500 502 503 504  /50x.html;     --- 定义网站错误网页
    location = /50x.html {
        root   /usr/share/nginx/html;            --- 定义错网页路径
    }
}

[root@web01 /server/tools]# vim /etc/yum.repos.d/nginx.repo
[nginx-stable]
name=nginx stable repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=1    （#安装有问题改成0或注释掉）
enabled=1
gpgkey=https://nginx.org/keys/nginx_signing.key
module_hotfixes=true

[root@web01 ~]# yum install nginx -y

[root@web01 /www/share]# cat /etc/nginx/conf.d/www.conf 
server{
    listen    80;
    server_name   www.ashuai.com;
  
    location / {

        root  /www/share;
        index  index.html;
}

[root@web01 /www]# tree /www
/www
└── share
    └── index.html

[root@web01 ~]# systemctl start nginx
[root@web01 ~]# netstat -lntup | grep nginx
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      8703/nginx: master 

[root@web01 ~]# vim /etc/hosts

server{
    listen    80;
    server_name   www.ashuai.com;
  
    location / {

        root  /www/share;
        index  index.html;
}

server{
    listen    10.0.0.7:80;
    server_name   www.ashuai.com;
  
    location / {

        root  /www/share;
        index  index.html;
}

server{
    listen    8080;
    server_name   www.ashuai.com;
  
    location / {

        root  /www/share;
        index  index.html;
}

location / {     
        auth_basic           "closed site";         ------->"closed site":描述信息 
        auth_basic_user_file password/htpasswd;         ------->"conf/htpasswd":密码文件存放目录(最好使用相对路径)
    }
    
##创建密码文件目录
[root@web01 ~]# cd /etc/nginx/
[root@web01 /etc/nginx]# mkdir password
##使用htpasswd创建密码文件
[root@web01 /etc/nginx/conf.d]# yum install httpd-tools -y
[root@web01 /etc/nginx]# htpasswd -bc ./password/htpasswd  shuai 123
Adding password for user shuai
[root@web01 /etc/nginx]# cat ./password/htpasswd 
shuai:$apr1$AjtERxjc$.IkOME8TUx1jzxn/MhEwb1
#修改密码文件权限
[root@web01 /etc/nginx/password]# chmod 600 htpasswd 
[root@web01 /etc/nginx/password]# chown nginx htpasswd

  -c  Create a new file.  *****
      创建一个密码文件
  -n  Don't update file; display results on stdout.
      不会更新文件; 显示文件内容信息
  -b  Use the password from the command line rather than prompting for it. *****
      免交互方式输入用户密码信息
  -i  Read password from stdin without verification (for script usage).
      读取密码采用标准输入方式,并不做检查 ???
  -m  Force MD5 encryption of the password (default).
      md5的加密算法
  -B  Force bcrypt encryption of the password (very secure).
      使用bcrypt对密码进行加密  
  -C  Set the computing time used for the bcrypt algorithm
      (higher is more secure but slower, default: 5, valid: 4 to 31).
      使用bcrypt algorithm对密码进行加密
  -d  Force CRYPT encryption of the password (8 chars max, insecure).
      密码加密方式
  -s  Force SHA encryption of the password (insecure).
      加密方式
  -p  Do not encrypt the password (plaintext, insecure).
      不进行加密
  -D  Delete the specified user.
      删除指定用户

[root@web01 /www/share]# mv index.html shuai.html
[root@web01 /www/share]# tree 
.
├── shuai01
│   └── test.txt
├── shuai02
│   └── test.txt
└── shuai.html
  
  
[root@web01 /www/share]# vim /etc/nginx/conf.d/www.conf 
server{
    listen    80;
    server_name   www.ashuai.com;

    location / {

        root  /www/share;
        index  index.html;                       #主页文件修改名称或直接删除
        auth_basic           "shuai";
        auth_basic_user_file password/htpasswd;
        autoindex  on;                #开启功能
        charset utf-8;                #目录中有中文需要设置字符集，不加则是乱码

        }
}

#PS：如果文件只打开不下载的话修改媒体资源类型文件。如果只想打开文件查看不下载，则将对应的文件格式添加即可。
[root@web01 /etc/nginx]# cat /etc/nginx/mime.types 

[root@web01 /etc/nginx/conf.d]# vim status.conf
server{
    listen    80;
    server_name   status.shuai.com;

    location /  {

          stub_status;

   }
}

location = / {                       ------>精确匹配,优先级最高
    [ configuration A ]
}

location / {                         ------>默认匹配，优先度最低，别的location都不具备匹配条件则匹配/
    [ configuration B ]
}

location /documents/ {               ------>按照目录进行匹配 ，优先级3级
    [ configuration C ]
}

location ^~ /images/ {               ------>优先匹配 ，优先级2级
    [ configuration D ]
}

location ~* \.(gif|jpg|jpeg)$ {      ------>不区分大小写进行匹配 ，优先级3级
    [ configuration E ]
}

[root@web01 /etc/nginx/conf.d]# vim test.conf
server{
     listen   80;
     server_name   test.shuai.com;
     location = / {
     return  404;
}

    location / {
     return  403;
}

    location /documents/ {
     return  501;
}

    location ^~ /images/ {
     return  502;
}

    location ~* \.(gif|jpg|jpeg)$ {
    return  500;
}

ngx_http_log_module

log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '          #定义日志格式，只能在http模块定义
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';                           

access_log /spool/logs/nginx-access.log main buffer=32k； #调用日志格式，可以在http, server, location模块定义，根据不同网站调用不同的日志格式

[root@web01 /etc/nginx/conf.d]# cat www.conf 
server{
     listen 80;
     server_name ashuai.com;
     rewrite  ^/(.*)  http://www.ashuai.com/$1 permanent;
}
server{
    listen    80;
    server_name   www.ashuai.com;
  
    location / {

        root  /www/share;
        index  index.html;
       # auth_basic           "shuai";
       # auth_basic_user_file password/htpasswd;
       autoindex  on;
       charset utf-8;

  }

}