oschina.net nginx配置

你的名字 2022-08-26 11:05 86阅读 0赞

nginx.conf

user  nobody;  
worker\_processes  2;

\#error\_log  logs/error.log;  
\#error\_log  logs/error.log  notice;  
\#error\_log  logs/error.log  info;

\#pid        logs/nginx.pid;

events \{  
    use epoll;  
    worker\_connections  4096;  
\}

http \{  
    include       mime.types;  
    default\_type  application/octet-stream;  
    server\_tokens off;

sendfile        on;  
    \#tcp\_nopush     on;

keepalive\_timeout  65;  
    limit\_zone   one  $binary\_remote\_addr  10m;

include gzip.conf;

server \{  
        listen       80;  
        server\_name  localhost;

location / \{  
            \#rewrite (.\*) [http://www.oschina.net$1][http_www.oschina.net_1] permanent;  
     deny all;  
        \}

location ~ ^/NginxStatus \{  
            stub\_status on;  
            access\_log off;  
            allow   127.0.0.1;  
            allow   219.136.242.37;  
            allow   192.168.2.0/24;  
            deny    all;  
        \}

server \{  
 listen 80;  
 server\_name [www.oschina.net][] m.oschina.net my.oschina.net;

log\_format  oschina\_log  
        '$remote\_addr - $remote\_user \[$time\_local\] $request '  
        '"$status" $body\_bytes\_sent "$http\_referer" '  
        '"$http\_user\_agent" "$http\_x\_forwarded\_for"';  
        access\_log  logs/oschina.log;

location ~ ^/NginxStatus \{  
            stub\_status on;  
            access\_log off;  
            auth\_basic              "valid-user";  
            auth\_basic\_user\_file  /opt/ngx/conf/oschina\_pw;  
        \}

location ~ ^/mrtg \{  
            auth\_basic          "valid-user";  
            auth\_basic\_user\_file /opt/ngx/conf/oschina\_pw;  
            access\_log off;  
            root /opt/mrtg;  
        \}

location ~ ^/awstats/ \{  
            root /data/oschina/webapp;  
            access\_log off;  
            error\_log off;  
            auth\_basic              "valid-user";  
            auth\_basic\_user\_file  /opt/ngx/conf/oschina\_pw;  
        \}

location ~ ^/(WEB-INF)/ \{  
            deny all;  
        \}

location ~ ^/uploads/ \{  
            root /data/oschina/webapp;  
            expires 24h;  
     valid\_referers none blocked \*.google.com \*.qq.com \*.oschina.net \*.csdn.net \*.gzv8.com;  
     if ($invalid\_referer)\{  
  rewrite ^/ [http://www.oschina.net/img/logo.gif][http_www.oschina.net_img_logo.gif];  
     \}  
        \}

location ~ \\.(htm|html|gif|jpg|jpeg|png|ico|rar|css|js|zip|txt|flv|swf|doc|ppt|xls|pdf)$ \{  
            root /data/oschina/webapp;  
     access\_log off;  
            expires 24h;  
        \}

location / \{  
     proxy\_pass [http://localhost:9081][http_localhost_9081];  
     include proxy.conf;  
 \}

error\_page 502 503 /502.html;  
        error\_page 404 /404.html;  
 error\_page 403 /403.html;  
    \}  
\}

proxy.conf

proxy\_redirect          off;  
proxy\_set\_header        Host $host;  
proxy\_set\_header        X-Real-IP $remote\_addr;  
proxy\_set\_header        X-Forwarded-For $proxy\_add\_x\_forwarded\_for;  
client\_max\_body\_size    10m;  
client\_body\_buffer\_size 128k;  
proxy\_connect\_timeout   300;  
proxy\_send\_timeout      300;  
proxy\_read\_timeout      300;  
proxy\_buffer\_size       4k;  
proxy\_buffers           4 32k;  
proxy\_busy\_buffers\_size 64k;  
proxy\_temp\_file\_write\_size 64k;

gzip.conf

<table> 
 <tbody> 
  <tr> 
   <td><code>2</code></td> 
   <td><code>gzip_min_length&nbsp;&nbsp;&nbsp;&nbsp; 1000; </code></td> 
  </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
  <tr> 
   <td><code>3</code></td> 
   <td><code>gzip_types&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; text/plain text/css application/x-javascript;</code></td> 
  </tr> 
 </tbody> 
</table>

[http_www.oschina.net_1]: http://www.oschina.net%241
[www.oschina.net]: http://www.oschina.net
[http_www.oschina.net_img_logo.gif]: http://www.oschina.net/img/logo.gif
[http_localhost_9081]: http://localhost:9081