Nginx on Canghai's Blog

Nginx on Canghai's Bloghttps://blog-old.pages.dev/tags/nginx/Recent content in Nginx on Canghai's BlogHugozhMon, 08 Sep 2025 00:00:00 +0000简单的Nginx配置https://blog-old.pages.dev/posts/learn/221015-config-of-nginx/Sat, 15 Oct 2022 00:00:00 +0000https://blog-old.pages.dev/posts/learn/221015-config-of-nginx/<h4 id="debian下快速安装nginx">Debian下快速安装Nginx</h4> <ul> <li>推荐使用docker安装</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>mkdir <span style="color:#f92672">-</span>p <span style="color:#f92672">/</span>opt<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>config <span style="color:#f92672">&&</span> vim <span style="color:#f92672">/</span>opt<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>config<span style="color:#f92672">/</span>nginx.conf </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-gdscript3" data-lang="gdscript3"><span style="display:flex;"><span>user nginx; </span></span><span style="display:flex;"><span>worker_processes auto; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span>error_log <span style="color:#f92672">/</span><span style="color:#66d9ef">var</span><span style="color:#f92672">/</span>log<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>error<span style="color:#f92672">.</span>log notice; </span></span><span style="display:flex;"><span>pid <span style="color:#f92672">/</span><span style="color:#66d9ef">var</span><span style="color:#f92672">/</span>run<span style="color:#f92672">/</span>nginx<span style="color:#f92672">.</span>pid; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span>events { </span></span><span style="display:flex;"><span> worker_connections <span style="color:#ae81ff">1024</span>; </span></span><span style="display:flex;"><span>} </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span>http { </span></span><span style="display:flex;"><span> include <span style="color:#f92672">/</span>etc<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>mime<span style="color:#f92672">.</span>types; </span></span><span style="display:flex;"><span> default_type application<span style="color:#f92672">/</span>octet<span style="color:#f92672">-</span>stream; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> log_format main <span style="color:#e6db74">'$remote_addr - $remote_user [$time_local] "$request" '</span> </span></span><span style="display:flex;"><span> <span style="color:#e6db74">'$status $body_bytes_sent "$http_referer" '</span> </span></span><span style="display:flex;"><span> <span style="color:#e6db74">'"$http_user_agent" "$http_x_forwarded_for"'</span>; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> access_log <span style="color:#f92672">/</span><span style="color:#66d9ef">var</span><span style="color:#f92672">/</span>log<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>access<span style="color:#f92672">.</span>log main; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> sendfile on; </span></span><span style="display:flex;"><span> tcp_nopush on; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> keepalive_timeout <span style="color:#ae81ff">65</span>; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> gzip on; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> include <span style="color:#f92672">/</span>etc<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>conf<span style="color:#f92672">.</span>d<span style="color:#f92672">/*.</span>conf; </span></span><span style="display:flex;"><span>} </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span>stream{ </span></span><span style="display:flex;"><span> log_format proxy <span style="color:#e6db74">'$remote_addr [$time_local] '</span> </span></span><span style="display:flex;"><span> <span style="color:#e6db74">'$protocol $status $bytes_sent $bytes_received '</span> </span></span><span style="display:flex;"><span> <span style="color:#e6db74">'$session_time "$upstream_addr" '</span> </span></span><span style="display:flex;"><span> <span style="color:#e6db74">'"$upstream_bytes_sent" "$upstream_bytes_received" "$upstream_connect_time"'</span>; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> access_log <span style="color:#f92672">/</span><span style="color:#66d9ef">var</span><span style="color:#f92672">/</span>log<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>stream<span style="color:#f92672">.</span>log proxy; </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> include <span style="color:#f92672">/</span>etc<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>conf<span style="color:#f92672">.</span>d<span style="color:#f92672">/*.</span>stream; </span></span><span style="display:flex;"><span>} </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-docker" data-lang="docker"><span style="display:flex;"><span>docker run -d <span style="color:#ae81ff">\ </span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> --name nginx <span style="color:#ae81ff">\ </span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> --restart always <span style="color:#ae81ff">\ </span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> --network host <span style="color:#ae81ff">\ </span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> -v /opt/nginx/config/conf.d:/etc/nginx/conf.d <span style="color:#ae81ff">\ </span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> -v /opt/nginx/config/nginx.conf:/etc/nginx/nginx.conf <span style="color:#ae81ff">\ </span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> -v /opt/nginx/log:/var/log/nginx <span style="color:#ae81ff">\ </span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> -v /opt/nginx/cert:/opt/cert <span style="color:#ae81ff">\ </span></span></span><span style="display:flex;"><span><span style="color:#ae81ff"></span> nginx:stable<span style="color:#960050;background-color:#1e0010"> </span></span></span></code></pre></div><h4 id="配置cloudflare证书">配置Cloudflare证书</h4> <ul> <li>编辑证书</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>vim <span style="color:#f92672">/</span>opt<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>cert<span style="color:#f92672">/</span>web.crt </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-cmd" data-lang="cmd"><span style="display:flex;"><span>-----BEGIN CERTIFICATE----- </span></span><span style="display:flex;"><span>MIIEFTCCAv2gAwIBAgIUTNa8COmbEvnnmyHFCWCSNbIlrowwDQYJKoZIhvcNAQEL </span></span><span style="display:flex;"><span>BQAwgagxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQH </span></span><span style="display:flex;"><span>Ew1TYW4gRnJhbmNpc2NvMRkwFwYDVQQKExBDbG91ZGZsYXJlLCBJbmMuMRswGQYD </span></span><span style="display:flex;"><span>VQQLExJ3d3cuY2xvdWRmbGFyZS5jb20xNDAyBgNVBAMTK01hbmFnZWQgQ0EgNjdh </span></span><span style="display:flex;"><span>NGUxOWE1YjBlYzNlOGEyMGI0MDNiZTQzYmI4OTcwHhcNMjIwODIyMDU0NzAwWhcN </span></span><span style="display:flex;"><span>MzcwODE4MDU0NzAwWjAiMQswCQYDVQQGEwJVUzETMBEGA1UEAxMKQ2xvdWRmbGFy </span></span><span style="display:flex;"><span>ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/Sy+00iQlMJYRCHTss </span></span><span style="display:flex;"><span>LxUbTn3DvAIUGvK8IPuYTl24ZyGVJXjI3mq10/3slUkUJLKjowScaMwwVCHwsM8M </span></span><span style="display:flex;"><span>rWIc97zRec8mjQA7ixayPSEtkXoaRC403nQEDdUqtY5bgpug6PFzZv2tUy3yxVG8 </span></span><span style="display:flex;"><span>KLQze+O1kIkw+pXvCL9nxPUEZ2SBZgDV/uBnQAZU1iZaQXtZPJaUxjQ1Wn+IBnj0 </span></span><span style="display:flex;"><span>KZUp7JidkaajcgmDq63gO++Ce6qNqQSHRNnfjFB9OoCcPR2zHOkn+cih9yNyM5XC </span></span><span style="display:flex;"><span>WCFKuPhHhuvqeIFTrt6lHMwtUrPzeq1Q63r5FemOZl45gj8NFvdoAcRF2eaJWHBI </span></span><span style="display:flex;"><span>vGUCAwEAAaOBuzCBuDATBgNVHSUEDDAKBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA </span></span><span style="display:flex;"><span>MB0GA1UdDgQWBBRnPvIl0HzOeOYRAYO0dUqWcZg5ZDAfBgNVHSMEGDAWgBRqKMUf </span></span><span style="display:flex;"><span>A2v8OOV10yFDxd0H0UD7ODBTBgNVHR8ETDBKMEigRqBEhkJodHRwOi8vY3JsLmNs </span></span><span style="display:flex;"><span>b3VkZmxhcmUuY29tL2I2M2NhZGM0LTU4Y2QtNGRhMC05ZmZlLTE0YTEzODIxMTI3 </span></span><span style="display:flex;"><span>NS5jcmwwDQYJKoZIhvcNAQELBQADggEBAAG6uWdDYpG9+9r3hMbCYUpA1hQOwh2D </span></span><span style="display:flex;"><span>viFQLgChN8OvwpAfL0MHBxpafaxOYAVODc/gLgYacAHOnYTytvX6NG6p98FivG/X </span></span><span style="display:flex;"><span>qpH2CqxUTY9zgD4aMNFSXA1LvVJ//0JcAMVe1P8MdtnIO419On3sQYwTVMTgO+Qw </span></span><span style="display:flex;"><span>mcjxX8JHQjhohO1xRdJutBA1fbcHzymjHdcIstabxyZf1eG3nLvF9SZcA8GSCSu7 </span></span><span style="display:flex;"><span>5QWVWM28EVR+VSAxMvXNbnkkuaRY2dOJdFKfc8SG9lSA/nCHprz6F32TKP4HZQay </span></span><span style="display:flex;"><span>GoxJuobHKaeI/K3WjQlDH1NAd2LWvIsPzvUBc9ugSR2DWsXYvgHs1qc= </span></span><span style="display:flex;"><span>-----END CERTIFICATE----- </span></span></code></pre></div><ul> <li>编辑私钥</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>vim <span style="color:#f92672">/</span>opt<span style="color:#f92672">/</span>nginx<span style="color:#f92672">/</span>cert<span style="color:#f92672">/</span>web.key </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-cmd" data-lang="cmd"><span style="display:flex;"><span>-----BEGIN PRIVATE KEY----- </span></span><span style="display:flex;"><span>MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC/0svtNIkJTCWE </span></span><span style="display:flex;"><span>Qh07LC8VG059w7wCFBryvCD7mE5duGchlSV4yN5qtdP97JVJFCSyo6MEnGjMMFQh </span></span><span style="display:flex;"><span>8LDPDK1iHPe80XnPJo0AO4sWsj0hLZF6GkQuNN50BA3VKrWOW4KboOjxc2b9rVMt </span></span><span style="display:flex;"><span>8sVRvCi0M3vjtZCJMPqV7wi/Z8T1BGdkgWYA1f7gZ0AGVNYmWkF7WTyWlMY0NVp/ </span></span><span style="display:flex;"><span>iAZ49CmVKeyYnZGmo3IJg6ut4DvvgnuqjakEh0TZ34xQfTqAnD0dsxzpJ/nIofcj </span></span><span style="display:flex;"><span>cjOVwlghSrj4R4br6niBU67epRzMLVKz83qtUOt6+RXpjmZeOYI/DRb3aAHERdnm </span></span><span style="display:flex;"><span>iVhwSLxlAgMBAAECggEABKroJZzGWHcSLKGaA3zj2MzuzOmf4AisNTIPUJmLddIm </span></span><span style="display:flex;"><span>x3u3fmgCdxdDxTIZQD6tiLlDN+zN/s+OpIeUtDarQclrQwMLEz4HAIJYzccT7Ldz </span></span><span style="display:flex;"><span>cRF4wKUU5D7ONVzFYsuzcstodhBoT6dRie5jD1+XbMPmvlfTLTttxYs1xWG/7aeD </span></span><span style="display:flex;"><span>saHbzN7lUiWu5GWgbBYHkeU6KOr83MakGVI82Z6sCJhuQe6fTlvjiqsF5GtyvrZ8 </span></span><span style="display:flex;"><span>N2BZZVleCWAE0uXntFmezWI6HvtxSBBFSNbqequr3r0IjL8qK8qvJ2k3xYLidERi </span></span><span style="display:flex;"><span>JX5jDJ+8opSN++Ia+lcpVZQ9F9jGJfpzKvPObVFqWwKBgQDfWepiT9nXAg0UM00y </span></span><span style="display:flex;"><span>+01JXogm6aHWDgBkQTqjGyC5cuHzF3TssY7pGtyoy7OAcsEqgpyEnUTsd7WbN6Ux </span></span><span style="display:flex;"><span>Pj+TpVULOtFlJrQR+zIWWCCfC6byXw/S8m9GpBvZescYW4QkOEtQlLIi7HUYlm+Y </span></span><span style="display:flex;"><span>dHy9eWJewn5b1bI0d4WX6UhQDwKBgQDb3RIa3hAcdsKryZJNN6j/QJFQBYnv+n5Y </span></span><span style="display:flex;"><span>UXrfFEAsdX2RU0xO8otss51OMrkbZS8qCmTC+hZgvYeUhAKf9SRnO/BH18sZskNW </span></span><span style="display:flex;"><span>psws2Lq6MM0ZOjZqeVoaEvf6ESLf/bbO/IKoRbtdWdCNilQ0FYpJE27MKcLQ+miB </span></span><span style="display:flex;"><span>AjXbego4SwKBgQDODxeFkiPpEHRekaIEigLY0MUOGXf8kzhbRi7B8jIzxcCd1KNE </span></span><span style="display:flex;"><span>B+BQQT8Y364AsF50SMH8O1guTZcX17OpBcQEBIG8dYxgJN/2wuiH4tBdy5M/guKH </span></span><span style="display:flex;"><span>fLGa26bx8ysh1rTH8cPSWQ0r2TmC8K+OWNIIwKc3w3puYW4ip65x44CakwKBgQCi </span></span><span style="display:flex;"><span>91URJyIoBvs6nBleNPCF6pULDF/2yeRWkGaT7Y23poqham24Yt1ngCcMLFq6bKCt </span></span><span style="display:flex;"><span>97BCOV7W7AUP112etPT7tBjhF5mKfXCeTNowL6EQm1Wa6mQlPbfEdeTqrUL9ZjDX </span></span><span style="display:flex;"><span>caFjGvTLN+R21V6ekIzEp6vLlvS5M7K8VSgYe3gRywKBgDz3aSUDhCC3zLvpFlW6 </span></span><span style="display:flex;"><span>jDX4bOjKoOidWdOdJKA8jtv57c7DhWTtz1Pd+9uf9xvx1dwKmMrvsVmoyd2hmWXq </span></span><span style="display:flex;"><span>ZrTlwbmZlo1CqWQ8yXzFBPXRXAc+ZJvmzUWIOBS6+i8qo7UuZIHucsJGDlFbvAfE </span></span><span style="display:flex;"><span>wz7MQiazno/JrI0hYXi3jwcG </span></span><span style="display:flex;"><span>-----END PRIVATE KEY----- </span></span></code></pre></div><h4 id="快速配置nginx">快速配置Nginx</h4> <p>按照推荐的<code>nginx.conf</code>配置，其中<strong>http</strong>模块包含<code>/etc/nginx/conf.d/</code>内的所有<code>*.conf</code>文件的配置，<strong>stream</strong>模块包含<code>/etc/nginx/conf.d/</code>内的所有<code>*.stream</code>文件的配置，下面有几个例子可以参考</p>