yum install nginx -y

# Nginx配置文件/etc/nginx/nginx.conf # nginx 主配置文件/etc/nginx/nginx.conf.default
# 可执行程序文件/usr/bin/nginx-upgrade/usr/sbin/nginx
# nginx库文件/usr/lib/systemd/system/nginx.service # 用于配置系统守护进程/usr/lib64/nginx/modules # Nginx模块目录
# 帮助文档/usr/share/doc/nginx-1.16.1/usr/share/doc/nginx-1.16.1/CHANGES/usr/share/doc/nginx-1.16.1/README/usr/share/doc/nginx-1.16.1/README.dynamic/usr/share/doc/nginx-1.16.1/UPGRADE-NOTES-1.6-to-1.10
# 静态资源目录/usr/share/nginx/html/404.html/usr/share/nginx/html/50x.html/usr/share/nginx/html/index.html
# 存放Nginx日志文件/var/log/nginx

# 开机配置systemctl enable nginx # 开机自动启动systemctl disable nginx # 关闭开机自动启动
# 启动Nginxsystemctl start nginx # 启动Nginx成功后，可以直接访问主机IP，此时会展示Nginx默认页面
# 停止Nginxsystemctl stop nginx
# 重启Nginxsystemctl restart nginx
# 重新加载Nginxsystemctl reload nginx
# 查看 Nginx 运行状态systemctl status nginx
# 查看Nginx进程ps -ef | grep nginx
# 杀死Nginx进程kill -9 pid # 根据上面查看到的Nginx进程号，杀死Nginx进程，-9 表示强制结束进程

nginx -s reload  # 向主进程发送信号，重新加载配置文件，热重启nginx -s reopen   # 重启 Nginxnginx -s stop    # 快速关闭nginx -s quit    # 等待工作进程处理完成后关闭nginx -T         # 查看当前 Nginx 最终的配置nginx -t         # 检查配置是否有问

# main段配置信息user  nginx;                        # 运行用户，默认即是nginx，可以不进行设置worker_processes  auto;             # Nginx 进程数，一般设置为和 CPU 核数一样error_log  /var/log/nginx/error.log warn;   # Nginx 的错误日志存放目录pid        /var/run/nginx.pid;      # Nginx 服务启动时的 pid 存放位置
# events段配置信息events {    use epoll;     # 使用epoll的I/O模型(如果你不知道Nginx该使用哪种轮询方法，会自动选择一个最适合你操作系统的)    worker_connections 1024;   # 每个进程允许最大并发数}
# http段配置信息# 配置使用最频繁的部分，代理、缓存、日志定义等绝大多数功能和第三方模块的配置都在这里设置http {     # 设置日志模式    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '                      '$status $body_bytes_sent "$http_referer" '                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;   # Nginx访问日志存放位置
    sendfile            on;   # 开启高效传输模式    tcp_nopush          on;   # 减少网络报文段的数量    tcp_nodelay         on;    keepalive_timeout   65;   # 保持连接的时间，也叫超时时间，单位秒    types_hash_max_size 2048;
    include             /etc/nginx/mime.types;      # 文件扩展名与类型映射表    default_type        application/octet-stream;   # 默认文件类型
    include /etc/nginx/conf.d/*.conf;   # 加载子配置项
    # server段配置信息    server {      listen       80;       # 配置监听的端口      server_name  localhost;    # 配置的域名
      # location段配置信息      location / {        root   /usr/share/nginx/html;  # 网站根目录        index  index.html index.htm;   # 默认首页文件        deny 172.168.22.11;   # 禁止访问的ip地址，可以为all        allow 172.168.33.44；# 允许访问的ip地址，可以为all      }
      error_page 500 502 503 504 /50x.html;  # 默认50x对应的访问页面      error_page 400 404 error.html;   # 同上    }}

user USERNAME [GROUP]user nginx lion; # 用户是nginx;组是lion

pid /opt/nginx/logs/nginx.pid # master主进程的的pid存放在nginx.pid的文件

worker_rlimit_nofile 20480; # 可以理解成每个worker子进程的最大连接数量。

worker_rlimit_core 50M; # 存放大小限制working_directory /opt/nginx/tmp; # 存放目录

worker_processes 4; # 指定具体子进程数量worker_processes auto; # 与当前cpu物理核心数一致

worker_priority -10; # 120-10=110，110就是最终的优先级

worker_shutdown_timeout 5s;

timer_resolution 100ms;

daemon off; # 默认是on，后台运行模式

use method; # 不推荐配置它，让nginx自己选择method 可选值为：select、poll、kqueue、epoll、/dev/poll、eventport

worker_connections 1024 # 每个子进程的最大连接数为1024

accept_mutex on # 默认是off关闭的，这里推荐打开

server_name name1 name2 name3
# 示例：server_name www.nginx.com;

# 添加如下内容，其中 121.42.11.34 是阿里云服务器IP地址121.42.11.34 www.nginx-test.com121.42.11.34 mail.nginx-test.com121.42.11.34 www.nginx-test.org121.42.11.34 doc.nginx-test.com121.42.11.34 www.nginx-test.cn121.42.11.34 fe.nginx-test.club

# 这里只列举了http端中的sever端配置
# 左匹配server {  listen  80;  server_name  *.nginx-test.com;  root  /usr/share/nginx/html/nginx-test/left-match/;  location / {    index index.html;  }}
# 正则匹配server {  listen  80;  server_name  ~^.*\.nginx-test\..*$;  root  /usr/share/nginx/html/nginx-test/reg-match/;  location / {    index index.html;  }}
# 右匹配server {  listen  80;  server_name  www.nginx-test.*;  root  /usr/share/nginx/html/nginx-test/right-match/;  location / {    index index.html;  }}
# 完全匹配server {  listen  80;  server_name  www.nginx-test.com;  root  /usr/share/nginx/html/nginx-test/all-match/;  location / {    index index.html;  }}

root path
例如：location /image {  root /opt/nginx/static;}
当用户访问 www.test.com/image/1.png 时，实际在服务器找的路径是 /opt/nginx/static/image/1.png

location /image {  alias /opt/nginx/static/image/;}
当用户访问 www.test.com/image/1.png 时，实际在服务器找的路径是 /opt/nginx/static/image/1.png

location [ = | ~ | ~* | ^~ ] uri {  ...}

server {  listen  80;  server_name  www.nginx-test.com;
  # 只有当访问 www.nginx-test.com/match_all/ 时才会匹配到/usr/share/nginx/html/match_all/index.html  location = /match_all/ {      root  /usr/share/nginx/html      index index.html  }
  # 当访问 www.nginx-test.com/1.jpg 等路径时会去 /usr/share/nginx/images/1.jpg 找对应的资源  location ~ \.(jpeg|jpg|png|svg)$ {    root /usr/share/nginx/images;  }
  # 当访问 www.nginx-test.com/bbs/ 时会匹配上 /usr/share/nginx/html/bbs/index.html  location ^~ /bbs/ {    root /usr/share/nginx/html;    index index.html index.htm;  }}

location /test {  ...}
location /test/ {  ...}

return code [text];return code URL;return URL;
例如：location / {  return 404; # 直接返回状态码}
location / {  return 404 "pages not found"; # 返回状态码 + 一段文本}
location / {  return 302 /bbs ; # 返回状态码 + 重定向地址}
location / {  return https://www.baidu.com ; # 返回重定向地址}

语法：rewrite 正则表达式 要替换的内容 [flag];
上下文：server、location、if
示例：rewirte /images/(.*\.jpg)$ /pic/$1; # $1是前面括号(.*\.jpg)的反向引用

server{  listen 80;  server_name fe.lion.club; # 要在本地hosts文件进行配置  root html;  location /search {    rewrite ^/(.*) https://www.baidu.com redirect;  }
  location /images {    rewrite /images/(.*) /pics/$1;  }
  location /pics {    rewrite /pics/(.*) /photos/$1;  }
  location /photos {
  }}

语法：if (condition) {...}
上下文：server、location
示例：if($http_user_agent ~ Chrome){  rewrite /(.*)/browser/$1 break;}

server {  listen 8080;  server_name localhost;  root html;
  location / {    if ( $uri = "/images/" ){      rewrite (.*) /pics/ break;    }  }}

server {  listen 80;  server_name fe.lion-test.club;
  location /download/ {    root /opt/source;
    autoindex on; # 打开 autoindex，，可选参数有 on | off    autoindex_exact_size on; # 修改为off，以KB、MB、GB显示文件大小，默认为on，以bytes显示出⽂件的确切⼤⼩    autoindex_format html; # 以html的方式进行格式化，可选参数有 html | json | xml    autoindex_localtime off; # 显示的⽂件时间为⽂件的服务器时间。默认为off，显示的⽂件时间为GMT时间  }}

server{  listen 8081;  server_name var.lion-test.club;  root /usr/share/nginx/html;  location / {    return 200 "remote_addr: $remote_addrremote_port: $remote_portserver_addr: $server_addrserver_port: $server_portserver_protocol: $server_protocolbinary_remote_addr: $binary_remote_addrconnection: $connectionuri: $urirequest_uri: $request_urischeme: $schemerequest_method: $request_methodrequest_length: $request_lengthargs: $argsarg_pid: $arg_pidis_args: $is_argsquery_string: $query_stringhost: $hosthttp_user_agent: $http_user_agenthttp_referer: $http_refererhttp_via: $http_viarequest_time: $request_timehttps: $httpsrequest_filename: $request_filenamedocument_root: $document_root";  }}

remote_addr: 27.16.220.84remote_port: 56838server_addr: 172.17.0.2server_port: 8081server_protocol: HTTP/1.1binary_remote_addr: 茉connection: 126uri: /test/request_uri: /test/?pid=121414&cid=sadasdscheme: httprequest_method: GETrequest_length: 518args: pid=121414&cid=sadasdarg_pid: 121414is_args: ?query_string: pid=121414&cid=sadasdhost: var.lion-test.clubhttp_user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36http_referer: http_via: request_time: 0.000https: request_filename: /usr/share/nginx/html/test/document_root: /usr/share/nginx/html

语法：upstream name {  ...}
上下文：http
示例：upstream back_end_server{  server 192.168.100.33:8081}

语法：server address [parameters]
上下文：upstream

keepalive connections;
上下文：upstream
示例：keepalive 16;

语法：keepalive_requests number;
默认值：keepalive_requests 100;
上下文：upstream

语法：keepalive_timeout time;
默认值：keepalive_timeout 60s;
上下文：upstream

语法：keepalive_timeout time;
默认值：keepalive_timeout 60s;
上下文：upstream

语法：proxy_pass URL;
上下文：location、if、limit_except
示例：proxy_pass http://127.0.0.1:8081proxy_pass http://127.0.0.1:8081/proxy

location /bbs/{  proxy_pass http://127.0.0.1:8080;}

location /bbs/{  proxy_pass http://127.0.0.1:8080/;}

# /etc/nginx/conf.d/proxy.confserver{  listen 8080;  server_name localhost;    location /proxy/ {    root /usr/share/nginx/html/proxy;    index index.html;  }}
# /usr/share/nginx/html/proxy/index.html
 121.42.11.34 proxy html 

# /etc/nginx/conf.d/proxy.confupstream back_end {  server 121.42.11.34:8080 weight=2 max_conns=1000 fail_timeout=10s max_fails=3;  keepalive 32;  keepalive_requests 80;  keepalive_timeout 20s;}
server {  listen 80;  server_name proxy.lion.club;  location /proxy {    proxy_pass http://back_end/proxy;  }}

121.5.180.193 proxy.lion.club

server{  listen 8020;  location / {    return 200 'return 8020 \n';  }}
server{  listen 8030;  location / {    return 200 'return 8030 \n';  }}
server{  listen 8040;  location / {    return 200 'return 8040 \n';  }}

upstream demo_server {  server 121.42.11.34:8020;  server 121.42.11.34:8030;  server 121.42.11.34:8040;}
server {  listen 80;  server_name balance.lion.club;    location /balance/ {    proxy_pass http://demo_server;  }}

# /etc/hosts121.5.180.193 balance.lion.club

upstream demo_server {  hash $request_uri;  server 121.42.11.34:8020;  server 121.42.11.34:8030;  server 121.42.11.34:8040;}
server {  listen 80;  server_name balance.lion.club;    location /balance/ {    proxy_pass http://demo_server;  }}

upstream demo_server {  ip_hash;  server 121.42.11.34:8020;  server 121.42.11.34:8030;  server 121.42.11.34:8040;}
server {  listen 80;  server_name balance.lion.club;    location /balance/ {    proxy_pass http://demo_server;  }}

语法：least_conn;
上下文：upstream;

upstream demo_server {  zone test 10M; # zone可以设置共享内存空间的名字和大小  least_conn;  server 121.42.11.34:8020;  server 121.42.11.34:8030;  server 121.42.11.34:8040;}
server {  listen 80;  server_name balance.lion.club;    location /balance/ {    proxy_pass http://demo_server;  }}

语法：proxy_cache zone | off ; # zone 是共享内存的名称
默认值：proxy_cache off;
上下文：http、server、location

语法：proxy_cache_path path [level=levels] ...可选参数省略，下面会详细列举
默认值：proxy_cache_path off
上下文：http

语法：proxy_cache_key
默认值：proxy_cache_key $scheme$proxy_host$request_uri;
上下文：http、server、location

语法：proxy_cache_valid [code...] time;
上下文：http、server、location
配置示例：proxy_cache_valid 200 304 2m;; # 说明对于状态为200和304的缓存文件的缓存时间是2分钟

语法：proxy_no_cache string;
上下文：http、server、location
示例：proxy_no_cache $http_pragma    $http_authorization;

语法：proxy_cache_bypass string;
上下文：http、server、location
示例：proxy_cache_bypass $http_pragma    $http_authorization;

MISS: 未命中缓存HIT：命中缓存EXPIRED: 缓存过期STALE: 命中了陈旧缓存REVALIDDATED: Nginx验证陈旧缓存依然有效UPDATING: 内容陈旧，但正在更新BYPASS: X响应从原始服务器获取

server {  listen 1010;  root /usr/share/nginx/html/1010;  location / {    index index.html;  }}
server {  listen 1020;  root /usr/share/nginx/html/1020;  location / {    index index.html;  }}

proxy_cache_path /etc/nginx/cache_temp levels=2:2 keys_zone=cache_zone:30m max_size=2g inactive=60m use_temp_path=off;
upstream cache_server{  server 121.42.11.34:1010;  server 121.42.11.34:1020;}
server {  listen 80;  server_name cache.lion.club;  location / {    proxy_cache cache_zone; # 设置缓存内存，上面配置中已经定义好的    proxy_cache_valid 200 5m; # 缓存状态为200的请求，缓存时长为5分钟    proxy_cache_key $request_uri; # 缓存文件的key为请求的URI    add_header Nginx-Cache-Status $upstream_cache_status # 把缓存状态设置为头部信息，响应给客户端    proxy_pass http://cache_server; # 代理转发  }}

...
server {  listen 80;  server_name cache.lion.club;  # URI 中后缀为 .txt 或 .text 的设置变量值为 "no cache"  if ($request_uri ~ \.(txt|text)$) {    set $cache_name "no cache"  }    location / {    proxy_no_cache $cache_name; # 判断该变量是否有值，如果有值则不进行缓存，如果没有值则进行缓存    proxy_cache cache_zone; # 设置缓存内存    proxy_cache_valid 200 5m; # 缓存状态为200的请求，缓存时长为5分钟    proxy_cache_key $request_uri; # 缓存文件的key为请求的URI    add_header Nginx-Cache-Status $upstream_cache_status # 把缓存状态设置为头部信息，响应给客户端    proxy_pass http://cache_server; # 代理转发  }}

server {  listen 443 ssl http2 default_server;   # SSL 访问端口号为 443  server_name lion.club;         # 填写绑定证书的域名(我这里是随便写的)  ssl_certificate /etc/nginx/https/lion.club_bundle.crt;   # 证书地址  ssl_certificate_key /etc/nginx/https/lion.club.key;      # 私钥地址  ssl_session_timeout 10m;  ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # 支持ssl协议版本，默认为后三个，主流版本是[TLSv1.2]   location / {    root         /usr/share/nginx/html;    index        index.html index.htm;  }}

http://store.company.com/dir2/other.html 同源https://store.company.com/secure.html 不同源，协议不同http://store.company.com:81/dir/etc.html 不同源，端口不同http://news.company.com/dir/other.html 不同源，主机不同

server {  listen        80;  server_name  fe.server.com;  location / {    proxy_pass dev.server.com;  }}

# # 默认off，是否开启gzipgzip on; # 要采用 gzip 压缩的 MIME 文件类型，其中 text/html 被系统强制启用；gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
# ---- 以上两个参数开启就可以支持Gzip压缩了 ---- #
# 默认 off，该模块启用后，Nginx 首先检查是否存在请求静态文件的 gz 结尾的文件，如果有则直接返回该 .gz 文件内容；gzip_static on;
# 默认 off，nginx做为反向代理时启用，用于设置启用或禁用从代理服务器上收到相应内容 gzip 压缩；gzip_proxied any;
# 用于在响应消息头中添加 Vary：Accept-Encoding，使代理服务器根据请求头中的 Accept-Encoding 识别是否启用 gzip 压缩；gzip_vary on;
# gzip 压缩比，压缩级别是 1-9，1 压缩级别最低，9 最高，级别越高压缩率越大，压缩时间越长，建议 4-6；gzip_comp_level 6;
# 获取多少内存用于缓存压缩结果，16 8k 表示以 8k*16 为单位获得；gzip_buffers 16 8k;
# 允许压缩的页面最小字节数，页面字节数从header头中的 Content-Length 中进行获取。默认值是 0，不管页面多大都压缩。建议设置成大于 1k 的字节数，小于 1k 可能会越压越大；# gzip_min_length 1k;
# 默认 1.1，启用 gzip 所需的 HTTP 最低版本；gzip_http_version 1.1;