nginx常用功能和命令

我不是女神ヾ 2021-11-09 01:26 470阅读 0赞

**|一、常用命令** |  
开启服务：start nginx  
停止服务：nginx -s stop  
nginx -s quit  
nginx停止命令stop与quit参数的区别在于stop是快速停止nginx，可能并不保存相关信息，quit是完整有序的停止nginx ，并保存相关信息。  
　nginx启动与停止命令的效果都可以通过Windows任务管理器中的进程选项卡观察。  
重启服务：nginx -s reload

nginx -s stop fast shutdown  
nginx -s quit graceful shutdown  
nginx -s reload changing configuration,starting new worker processes with a new configuration,graceful shutdown of old worker processes  
nginx -s reopen re-opening log files

启动  
直接点击Nginx目录下的nginx.exe 或者 cmd运行start nginx  
查看nginx是否启动  
1）命令方式 tasklist /fi “imagename eq nginx.exe”

动静分离要点，必须把访问服务器的端口写成nginx监听的端口，这样才能避免跨域

配置参数说明：  
nigix做反向代理

注意 : p r o x y p o r t 与 : proxy\_port 与 : proxyport与:server\_port 区别

$server\_port ：nigix监听的端口

$proxy\_port ： 服务器真正访问的端口

\#一般情况都用这个host  
proxy\_set\_header Host $host;  
\#获取到用户真实IP配置  
proxy\_set\_header X-Real-IP $remote\_addr;  
proxy\_set\_header X-Forwarded-For $proxy\_add\_x\_forwarded\_for; |

|**配置二级域名和反向代理**|  
下面是基础的配置  
server \{  
listen 80;  
server\_name localhost;

#charset koi8-r;
    
        #access_log  logs/host.access.log  main;
    
        location / {
            root   html;
            index  index.html index.htm;
        }

解决session丢失问题  
server \{  
server\_name [www.hxkj.org][];  
listen 80;

location / {
    	  proxy_pass http://127.0.0.1:8888/;
    	  proxy_redirect default;
    	  proxy_http_version 1.1;
    	  proxy_set_header Upgrade $http_upgrade;
    	  proxy_set_header Connection $http_connection;
          proxy_set_header   Host             $host;
    	  proxy_set_header   X-Real-IP        $remote_addr;
    	  proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    	  add_header From www.hxtec.top;
    	  proxy_cookie_path /vieagr-webserver/ /;
    	  proxy_set_header Cookie $http_cookie;
    	}
    	
    }
    
    server {
    	server_name image.hxkj.org;
    	listen 80;
     
    	location / {
    	  proxy_pass http://127.0.0.1:8888/totopsfile;
    	  proxy_redirect default;
    	  proxy_http_version 1.1;
    	  proxy_set_header Upgrade $http_upgrade;
    	  proxy_set_header Connection $http_connection;
    	}
    	
    }|

| **负载均衡配置** |  
http \{  
include mime.types;  
default\_type application/octet-stream;

log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    
    access_log  logs/access.log  main;
    
    sendfile        on;
    #tcp_nopush     on;
    
    #keepalive_timeout  0;
    keepalive_timeout  65;
    
    #压缩功能设置
    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 16k;
    #gzip_http_version 1.0;
    gzip_comp_level 1;
    gzip_types text/plain application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
    gzip_vary off;
    gzip_disable "MSIE [1-6]\.";
    
    #访问后端服务器自动分配IP
    upstream localhost {  
      server localhost:8080;  
      server localhost:8081;  
    }  
    server {
        listen       80;
        server_name  localhost;
    
        charset utf-8;
    
        access_log  logs/host.access.log  main;
    
        location ~ .*\.(html|htm|gif|jpg|jpeg|bmp|png|ico|txt|js|css)$ {
            root   webapp/hxtecblog;
            index  index.html;
        }
    
        error_page  404              /404.html;
    
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    	
    	location / {
    		proxy_pass http://localhost;   #来自jsp请求交给tomcat处理
    		proxy_redirect off;
    		proxy_set_header Host $host;    #后端的Web服务器可以通过X-Forwarded-For获取用户真实IP
    		proxy_set_header X-Real-IP $remote_addr;
    		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    		client_max_body_size 10m;   #允许客户端请求的最大单文件字节数
    		client_body_buffer_size 128k; #缓冲区代理缓冲用户端请求的最大字节数
    		proxy_connect_timeout 90;   #nginx跟后端服务器连接超时时间(代理连接超时)
    		proxy_read_timeout 90;      #连接成功后，后端服务器响应时间(代理接收超时)
    		proxy_buffer_size 4k;       #设置代理服务器（nginx）保存用户头信息的缓冲区大小
    		proxy_buffers 6 32k;        #proxy_buffers缓冲区，网页平均在32k以下的话，这样设置
    		proxy_busy_buffers_size 64k;#高负荷下缓冲大小（proxy_buffers*2）
    		proxy_temp_file_write_size 64k; #设定缓存文件夹大小，大于这个值，将从upstream服务器传
        }
    
    }

\} |

| **缓存设置** |  
\#proxy\_ignore\_headers “Cache-Control”;  
\#proxy\_hide\_header “Cache-Control”;  
proxy\_cache\_path /data0/proxy\_cache\_dir levels=1:2 keys\_zone=cache\_one:200m inactive=5s max\_size=30g;  
………

location ~ .\*.(php|jsp|cgi)$  
\{  
proxy\_read\_timeout 10s;  
proxy\_connect\_timeout 10s;  
proxy\_set\_header Host $host;  
proxy\_cache\_use\_stale updating;  
proxy\_cache\_key  h o s t host hosturi i s a r g s is\_args isargsargs;  
proxy\_cache cache\_one;  
\#proxy\_ignore\_headers “Cache-Control”;  
\#proxy\_hide\_header “Cache-Control”;  
\#proxy\_ignore\_headers “Expires”;  
\#proxy\_hide\_header “Expires”;  
proxy\_hide\_header “Set-Cookie”;  
proxy\_ignore\_headers “Set-Cookie”;  
\#add\_header Cache-Control max-age=60;  
add\_header X-Cache ‘$upstream\_cache\_status from $server\_addr’;  
proxy\_cache\_valid 200 304 2m;  
\#proxy\_cache\_valid any 0m;  
proxy\_pass http://backend\_server;  
expires 30s;  
\}|  
|全配置–万象农业|  
\#user nobody;  
worker\_processes 1;

\#error\_log logs/error.log;  
\#error\_log logs/error.log notice;  
\#error\_log logs/error.log info;

\#pid logs/nginx.pid;

events \{  
worker\_connections 1024;  
\}

http \{  
include mime.types;  
default\_type application/octet-stream;

#log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
    
    #access_log  logs/access.log  main;
    
    sendfile        on;
    #tcp_nopush     on;
    
    #keepalive_timeout  0;
    keepalive_timeout  65;
    
    #gzip  on;
    
    server {
        listen       80;
        server_name  localhost;
    
        #charset koi8-r;
    
        #access_log  logs/host.access.log  main;
    
        location / {
            root   html;
            index  index.html index.htm;
        }
    
        #error_page  404              /404.html;
    
        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    
        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}
    
        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}
    
        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }
    server {
    	server_name www.hxtec.top;
    	listen 80;
     
    	location / {
    	  proxy_pass http://127.0.0.1:8888/vieagr-webserver/;
    	  proxy_redirect default;
    	  proxy_http_version 1.1;
    	  proxy_ignore_headers "Cache-Control";
    	  proxy_hide_header "Cache-Control";
          proxy_set_header   Host             $host;
    	  proxy_set_header   X-Real-IP        $remote_addr;
    	  proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    	  add_header From www.hxtec.top;
    	  proxy_cookie_path /vieagr-webserver /;
    	  proxy_set_header Cookie $http_cookie;
    	}
    	
    }
    
    server {
    	server_name images.hxtec.top;
    	listen 80;
     
    	location / {
    	  proxy_pass http://127.0.0.1:8888/vieagrfiles/;
    	  proxy_redirect default;
    	  proxy_http_version 1.1;
    	  proxy_ignore_headers "Cache-Control";
    	  proxy_hide_header "Cache-Control";
          proxy_set_header   Host             $host;
    	  proxy_set_header   X-Real-IP        $remote_addr;
    	  proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    	  add_header From images.hxtec.top;
    	  proxy_cookie_path /vieagrfiles/ /;
    	  proxy_set_header Cookie $http_cookie;
    	}
    	
    }
    
    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;
    
    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}
    
    
    # HTTPS server
    #
    #server {
    #    listen       443 ssl;
    #    server_name  localhost;
    
    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;
    
    #    ssl_session_cache    shared:SSL:1m;
    #    ssl_session_timeout  5m;
    
    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;
    
    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

\}|

| **Nginx 配置** |  
在了解具体的Nginx配置项之前我们需要对于Nginx配置文件的构成有所概念，一般来说，Nginx配置文件会由如下几个部分构成：

##### 全局块 #####

…

#### events块 ####

events \{  
…  
\}

#### http块 ####

http  
\{  
\# http全局块  
…  
\# 虚拟主机server块  
server  
\{  
\# server全局块  
…  
\# location块  
location \[PATTERN\]  
\{  
…  
\}  
location \[PATTERN\]  
\{  
…  
\}  
\}  
server  
\{  
…  
\}  
\# http全局块  
…  
\}  
在上述配置中我们可以看出，Nginx配置文件由以下几个部分构成：

全局块：配置影响nginx全局的指令。一般有运行nginx服务器的用户组，nginx进程pid存放路径，日志存放路径，配置文件引入，允许生成worker process数等。

events块：配置影响nginx服务器或与用户的网络连接。有每个进程的最大连接数，选取哪种事件驱动模型处理连接请求，是否允许同时接受多个网路连接，开启多个网络连接序列化等。

http块：可以嵌套多个server，配置代理，缓存，日志定义等绝大多数功能和第三方模块的配置。如文件引入，mime-type定义，日志自定义，是否使用sendfile传输文件，连接超时时间，单连接请求数等。

server块：配置虚拟主机的相关参数，一个http中可以有多个server。

location块：配置请求的路由，以及各种页面的处理情况。

\#\#\#\#\#\#\#\#\#\#\# 每个指令必须有分号结束。\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#  
\#user administrator administrators; \#配置用户或者组，默认为nobody nobody。  
\#worker\_processes 2; \#允许生成的进程数，默认为1  
\#pid /nginx/pid/nginx.pid; \#指定nginx进程运行文件存放地址  
error\_log log/error.log debug; \#制定日志路径，级别。这个设置可以放入全局块，http块，server块，级别以此为：debug|info|notice|warn|error|crit|alert|emerg  
events \{  
accept\_mutex on; \#设置网路连接序列化，防止惊群现象发生，默认为on  
multi\_accept on; \#设置一个进程是否同时接受多个网络连接，默认为off  
\#use epoll; \#事件驱动模型，select|poll|kqueue|epoll|resig|/dev/poll|eventport  
worker\_connections 1024; \#最大连接数，默认为512  
\}  
http \{  
include mime.types; \#文件扩展名与文件类型映射表  
default\_type application/octet-stream; \#默认文件类型，默认为text/plain  
\#access\_log off; \#取消服务日志  
log\_format myFormat ‘ r e m o t e a d d r – remote\_addr– remoteaddr–remote\_user \[$time\_local\] $request $status $body\_bytes\_sent $http\_referer $http\_user\_agent $http\_x\_forwarded\_for’; \#自定义格式  
access\_log log/access.log myFormat; \#combined为日志格式的默认值  
sendfile on; \#允许sendfile方式传输文件，默认为off，可以在http块，server块，location块。  
sendfile\_max\_chunk 100k; \#每个进程每次调用传输数量不能大于设定的值，默认为0，即不设上限。  
keepalive\_timeout 65; \#连接超时时间，默认为75s，可以在http，server，location块。

# 定义常量
    upstream mysvr {   
      server 127.0.0.1:7878;
      server 192.168.10.121:3333 backup;  #热备
    }
    error_page 404 https://www.baidu.com; #错误页 
    
    #定义某个负载均衡服务器   
    server {
        keepalive_requests 120; #单连接请求上限次数。
        listen       4545;   #监听端口
        server_name  127.0.0.1;   #监听地址       
        location  ~*^.+$ {       #请求的url过滤，正则匹配，~为区分大小写，~*为不区分大小写。
           #root path;  #根目录
           #index vv.txt;  #设置默认页
           proxy_pass  http://mysvr;  #请求转向mysvr 定义的服务器列表
           deny 127.0.0.1;  #拒绝的ip
           allow 172.18.5.54; #允许的ip           
        } 
    }

\}  
虚拟主机与静态站点

SERVING STATIC CONTENT

本部分概述如何配置Nginx进行静态内容服务，Nginx的静态内容分发能力还是非常强大的。

http \{  
server \{  
listen 80;  
server\_name [www.domain1.com][];  
access\_log logs/domain1.access.log main;  
location / \{  
index index.html;  
root /var/www/domain1.com/htdocs;  
\}  
\}  
server \{  
listen 80;  
server\_name [www.domain2.com][];  
access\_log logs/domain2.access.log main;  
location / \{  
index index.html;  
root /var/www/domain2.com/htdocs;  
\}  
\}  
\}  
虚拟主机配置详解

主机与端口

listen 127.0.0.1:8000;  
listen \*:8000;  
listen localhost:8000;

#### IPV6 ####

listen \[::\]:8000;

### other params ###

listen 443 default\_serer ssl;  
listen 127.0.0.1 default\_server accept\_filter=dataready backlog=1024  
服务域名

##### 支持多域名配置 #####

server\_name [www.barretlee.com][] [barretlee.com][];

##### 支持泛域名解析 #####

server\_name \*.barretlee.com;

##### 支持对于域名的正则匹配 #####

server\_name ~^.barret.com$;  
URI匹配

location = / \{  
\# 完全匹配 =  
\# 大小写敏感 ~  
\# 忽略大小写 ~\*  
\}  
location ^~ /images/ \{  
\# 前半部分匹配 ^~  
\# 可以使用正则，如：  
\# location ~\* .(gif|jpg|png)$ \{ \}  
\}  
location / \{  
\# 如果以上都未匹配，会进入这里  
\}  
文件路径配置

根目录

location / \{  
root /home/barret/test/;  
\}  
别名

location /blog \{  
alias /home/barret/www/blog/;  
\}  
location ~ ^/blog/(\\d+)/(\[\\w-\]+)$ \{  
\# /blog/20141202/article-name  
\# -> /blog/20141202-article-name.md  
alias /home/barret/www/blog/$[1-$2.md][1-_2.md];  
\}  
首页

index /html/index.html /php/index.php;  
重定向页面

error\_page 404 /404.html;  
error\_page 502 503 /50x.html;  
error\_page 404 =200 /1x1.gif;  
location / \{  
error\_page 404 @fallback;  
\}  
location @fallback \{  
\# 将请求反向代理到上游服务器处理  
proxy\_pass [http://localhost:9000][http_localhost_9000];  
\}  
try\_files

try\_files $uri $uri.html $uri/index.html @other;  
location @other \{  
\# 尝试寻找匹配 uri 的文件，失败了就会转到上游处理  
proxy\_pass [http://localhost:9000][http_localhost_9000];  
\}  
location / \{  
\# 尝试寻找匹配 uri 的文件，没找到直接返回 502  
try\_files $uri $uri.html =502;  
\}  
缓存配置

HTTP 缓存的四种风味与缓存策略

Expire:过期时间

在Nginx中可以配置缓存的过期时间：

location ~\* .(?:ico|css|js|gif|jpe?g|png)$ \{  
expires 30d;  
add\_header Vary Accept-Encoding;  
access\_log off;  
\}  
我们也可以添加更复杂的配置项：

location ~* ^.+\.(?:css|cur|js|jpe?g|gif|htc|ico|png|html|xml|otf|ttf|eot|woff|svg)$ {
    
        access_log off;
        expires 30d;
        ## No need to bleed constant updates. Send the all shebang in one
        ## fell swoop.
        tcp_nodelay off;
        ## Set the OS file cache.
        open_file_cache max=3000 inactive=120s;
        open_file_cache_valid 45s;
        open_file_cache_min_uses 2;
        open_file_cache_errors off;
    }

反向代理

events\{

\}  
http\{  
upstream ggzy \{  
server 127.0.0.1:1398 weight=3;  
server 127.0.0.1:1399;  
\}  
\# 80端口配置，可配置多个Virtual Host  
server \{  
listen 80;  
index index index.htm [index.py][] index.html;

server_name app.truelore.cn;
    
        location / {
            proxy_pass_header Server;
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Scheme $scheme;
            proxy_pass http//ggzy;
        }
    }

\}  
NodeJS Application

const http = require(‘http’);  
http.createServer((req, res) => \{  
res.end(‘hello world’);  
\}).listen(9000);  
任何请求过来都返回 hello world，简版的 Nginx 配置如下，

events \{  
\# 这里可不写东西  
use epoll;  
\}  
http \{  
server \{  
listen 127.0.0.1:8888;  
\# 如果请求路径跟文件路径按照如下方式匹配找到了，直接返回  
try\_files $uri  u r i / i n d e x . h t m l ; l o c a t i o n   ∗ / ( j s ∣ c s s ∣ i m a g e ∣ f o n t ) / uri/index.html; location ~\* ^/(js|css|image|font)/ uri/index.html;location ∗/(js∣css∣image∣font)/ \{  
\# 静态资源都在 static 文件夹下  
root /home/barret/www/static/;  
\}  
location /app \{  
\# Node.js 在 9000 开了一个监听端口  
proxy\_pass [http://127.0.0.1:9000][http_127.0.0.1_9000];  
\}  
\# 上面处理出错或者未找到的，返回对应状态码文件  
error\_page 404 /404.html;  
error\_page 502 503 504 /50x.html;  
\}  
\}  
首先 try\_files，尝试直接匹配文件；没找到就匹配静态资源；还没找到就交给 Node 处理；否则就返回 4xx/5xx 的状态码。

Upstream Cache

A Guide to Caching with NGINX and NGINX Plus

http \{  
,  
proxy\_cache\_path /var/cache/nginx/cache levels=1:2 keys\_zone=imgcache:100m inactive=1d max\_size=10g;  
server \{  
…  
location ~\* ^.+.(js|ico|gif|jpg|jpeg|png|html|htm)$ \{  
log\_not\_found off;  
access\_log off;  
expires 7d;  
proxy\_pass [http://img.example.com][http_img.example.com] ;  
proxy\_cache imgcache;  
proxy\_cache\_valid 200 302 1d;  
proxy\_cache\_valid 404 10m;  
proxy\_cache\_valid any 1h;  
proxy\_cache\_use\_stale error timeout invalid\_header updating http\_500 http\_502 http\_503 http\_504;  
\}  
\}  
\}  
HTTPS

HTTPS 理论详解与实践

Let’s Encrypt 证书申请

Let’s Encrypt 为我们提供了非常方便的命令行工具certbot，笔者是在Ubuntu 16.04的机器上进行配置，因此只要执行如下命令即可:

##### 安装letsencrypt命令行 #####

$ sudo apt-get install letsencrypt

###### 独立的为example.com与www.example.com申请证书 ######

$ letsencrypt certonly --standalone -d [example.com][] \-d [www.example.com][]

###### 自动执行证书刷新操作 ######

$ letsencrypt renew --dry-run --agree-tos  
基本HTTPS配置

基本的HTTPS支持配置如下:

server \{  
listen 192.168.1.11:443; \#ssl端口  
server\_name [test.com][];  
\#为一个server\{…\}开启ssl支持  
ssl on;  
\#指定PEM格式的证书文件  
ssl\_certificate /etc/nginx/test.pem;  
\#指定PEM格式的私钥文件  
ssl\_certificate\_key /etc/nginx/test.key;  
\}  
在真实的生产环境中，我们的配置如下:

server \{  
\# 如果需要spdy也可以加上,lnmp1.2及其后版本都默认支持spdy,lnmp1.3 nginx 1.9.5以上版本默认支持http2  
listen 443 ssl;  
\# 这里是你的域名  
server\_name [www.vpser.net][];  
index index.html index.htm index.php default.html default.htm default.php;  
\# 网站目录  
root /home/wwwroot/www.vpser.net;  
\# 前面生成的证书，改一下里面的域名就行  
ssl\_certificate /etc/letsencrypt/live/www.vpser.net/fullchain.pem;  
\# 前面生成的密钥，改一下里面的域名就行  
ssl\_certificate\_key /etc/letsencrypt/live/www.vpser.net/privkey.pem;  
ssl\_ciphers “EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5”;  
ssl\_protocols TLSv1 TLSv1.1 TLSv1.2;  
ssl\_prefer\_server\_ciphers on;  
ssl\_session\_cache shared:SSL:10m;

#这个是伪静态根据自己的需求改成其他或删除
    include wordpress.conf;  
    
    #error_page 404 /404.html;
    
    location ~ [^/]\.php(/|$)
    {
        # comment try_files $uri =404; to enable pathinfo
        try_files $uri =404;
        fastcgi_pass unix:/tmp/php-cgi.sock;
        fastcgi_index index.php;
        # lnmp 1.0及之前版本替换为include fcgi.conf;
        include fastcgi.conf;     
        #include pathinfo.conf;
    }
    
    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    {
    expires 30d;
    }
    
    location ~ .*\.(js|css)?$
    {
    expires 12h;
    }
    
    access_log off;

\}  
强制HTTP转到HTTPS

Nginx Rewrite

server \{  
listen 192.168.1.111:80;  
server\_name [test.com][];  
rewrite ^(.\*)$ [https://$host$1][https_host_1] permanent;  
\}  
Nginx 497错误码

利用error\_page命令将497状态码的链接重定向到https://test.com这个域名上

server \{  
listen 192.168.1.11:443; \#ssl端口  
listen 192.168.1.11:80; \#用户习惯用http访问，加上80，后面通过497状态码让它自动跳到443端口  
server\_name [test.com][];  
\#为一个server\{…\}开启ssl支持  
ssl on;  
\#指定PEM格式的证书文件  
ssl\_certificate /etc/nginx/test.pem;  
\#指定PEM格式的私钥文件  
ssl\_certificate\_key /etc/nginx/test.key;

#让http请求重定向到https请求   
    error_page 497  https://$host$uri?$args;

\}  
Meta刷新，前端跳转

在HTTP正常返回的页面中添加meta属性：

server \{ listen 192.168.1.11:80; server\_name test.com;

location / {  
                #index.html放在虚拟主机监听的根目录下  
        root /srv/www/http.test.com/;  
    }  
        #将404的页面重定向到https的首页  
    error_page  404 https://test.com/;

\}  
反向HTTPS转发到内部HTTP |

| **最后的绝杀：** |  
nginx上启用https  
server \{  
listen 443 ssl;  
server\_name www.**.com;\#域名  
ssl\_certificate ssl\_certs/1\_www.**.com\_cert.crt;\#证书路径  
ssl\_certificate\_key ssl\_certs/2\_www.\*\*\*\*.com.key;\#key路径

ssl_session_cache    shared:SSL:1m; #s储存SSL会话的缓存类型和大小                        
      ssl_session_timeout  5m; #会话过期时间                                               
                                                                               
      ssl_ciphers  HIGH:!aNULL:!MD5; #为建立安全连接，服务器所允许的密码格式列表                                          
      ssl_prefer_server_ciphers  on; #依赖SSLv3和TLSv1协议的服务器密码将优先于客户端密码
                                              
      location /     {                                                 
              root     /var/www/;                               
              index    index.html index.htm index.php;                           
      }                                                                
                                                                               
      location ~ \.php$ {                                                      
          root           /var/www;                                     
          fastcgi_pass   127.0.0.1:9000;                                       
          fastcgi_index  index.php;                                            
          fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;  
          include        fastcgi_params;                                       
      }

将http访问自动跳转到https  
server\{  
listen 80 www.***.com;  
rewrite ^/(.)$ [https://www][https_www].***\*.com/$1 permanent;  
\} |

|**我的配置绝杀**|  
\#tuesserver https  
server \{  
listen 443;  
server\_name [server.ourtues.com][];  
ssl on;  
ssl\_certificate cert-tues/214069203020278.pem;  
ssl\_certificate\_key cert-tues/214069203020278.key;  
ssl\_session\_timeout 5m;  
ssl\_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  
ssl\_protocols TLSv1 TLSv1.1 TLSv1.2;  
ssl\_prefer\_server\_ciphers on;  
location / \{  
proxy\_pass [http://127.0.0.1:9002/;][http_127.0.0.1_9002]  
proxy\_redirect default;  
proxy\_http\_version 1.1;  
proxy\_ignore\_headers “Cache-Control”;  
proxy\_hide\_header “Cache-Control”;  
proxy\_set\_header Host $host;  
proxy\_set\_header X-Real-IP $remote\_addr;  
proxy\_set\_header X-Forwarded-For $proxy\_add\_x\_forwarded\_for;  
add\_header From [server.ourtues.com][];  
proxy\_cookie\_path /tues-webserver /;  
proxy\_set\_header Cookie KaTeX parse error: Expected 'EOF', got '\}' at position 30: … \}̲ \} … [https://server.ourtues.com/$1][https_server.ourtues.com_1] permanent;  
\}  
\#wxserver files  
server \{  
listen 80;  
server\_name [files.aibton.com][];

location / {
                        root /home/admin/csmartfiles/;
    
                }
        }

\#aibton framework website  
server \{  
listen 80;  
server\_name [www.aibton.com][] [aibton.com][];

location / {
                        root /home/admin/aibton-project/aibton-web/;
                        index index_prod.html;
    
                }
        }|

| **react antd项目部署注意** |  
\#[www.aibton.com][] [aibton.com][];  
server \{  
listen 80;  
server\_name [www.aibton.com][] [aibton.com][];  
location / \{  
root /home/admin/aibton-project/aibton-web/build/;  
try\_files $uri /home/admin/aibton-project/aibton-web/build/index.html;  
index index.html;  
\}  
location ~\* html \{  
rewrite .\* /index.html break;  
root /home/admin/aibton-project/aibton-web/build/;  
\}  
\}  
|  
|**反向代理跨域问题**|  
server \{  
server\_name localhost;  
listen 9999;

location / {
    		root   C:/Users/huzhihui/Desktop/我的文件/hxtec-project/furniture-server-cp/src/main/resources/static/;
            index  view/index.html view/index.htm;
    	}
    	location /apis {
    		rewrite  ^.+apis/?(.*)$ /$1 break;
    		include  uwsgi_params;
    		proxy_pass   http://127.0.0.1:8888;
       }
    	
    }|

[www.hxkj.org]: http://www.hxkj.org
[www.domain1.com]: http://www.domain1.com
[www.domain2.com]: http://www.domain2.com
[www.barretlee.com]: http://www.barretlee.com
[barretlee.com]: http://barretlee.com
[1-_2.md]: http://1-$2.md
[http_localhost_9000]: http://localhost:9000
[index.py]: http://index.py
[http_127.0.0.1_9000]: http://127.0.0.1:9000
[http_img.example.com]: http://img.example.com
[example.com]: http://example.com
[www.example.com]: http://www.example.com
[test.com]: http://test.com
[www.vpser.net]: http://www.vpser.net
[https_host_1]: https://$host$1
[https_www]: https://www
[server.ourtues.com]: http://server.ourtues.com
[http_127.0.0.1_9002]: http://127.0.0.1:9002/;
[https_server.ourtues.com_1]: https://server.ourtues.com/$1
[files.aibton.com]: http://files.aibton.com
[www.aibton.com]: http://www.aibton.com
[aibton.com]: http://aibton.com