安装篇：centos7安装nginx

ゝ一世哀愁。 2023-03-06 03:51 13阅读 0赞

### 1.先查看有没有安装gcc ###

gcc -v

如果没安装就安装

yum install gcc-c++

### 2、安装pcre和pcre-devel ###

PCRE(Perl Compatible Regular Expressions) 是一个Perl库，包括 perl 兼容的正则表达式库。

nginx 的 http 模块使用 pcre 来解析正则表达式，pcre-devel 是使用 pcre 开发的一个二次开发库。

yum install -y pcre pcre-devel

### 3、安装zlib zlib提供了很多压缩和解方式，nginx需要zlib对http进行gzip ###

yum install -y zlib zlib-devel

### 4、安装openssl openssl是一个安全套接字层密码库，nginx要支持https，需要使用openssl ###

yum install -y openssl openssl-devel

### 5. 下载nginx ###

wget http://nginx.org/download/nginx-1.9.9.tar.gz

### 6.解压 ###

tar -zxvf nginx-1.9.9.tar.gz -C  /usr/local

### 7.cd到文件路劲 ###

cd /usr/local/nginx-1.9.9

### 8.编译 ###

./configure --prefix=/usr --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --pid-path=/usr/local/nginx/nginx.pid --lock-path=/var/lock/nginx.lock --user=nginx --group=nginx --with-http_ssl_module --with-http_flv_module --with-http_gzip_static_module --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/tem/nginx/client --http-proxy-temp-path=/var/tem/nginx/proxy --http-fastcgi-temp-path=/var/tem/nginx/fcgi --with-http_stub_status_module

创建文件夹

mkdir -p /usr/local/nginx
    mkdir -p /var/tem/nginx

### 9.安装 ###

make && make install

### 10.启动 ###

nginx -c /etc/nginx/nginx.conf

### 11. 如果出现\[emerg\] getpwnam(“nginx”) failed 错误 执行 ###

useradd -s /sbin/nologin -M nginx
    id nginx

### 12.如果出现 \[emerg\] mkdir() “/var/temp/nginx/client” failed (2: No such file or directory) 错误 执行 ###

sudo mkdir -p /var/tem/nginx/client

### 13.如果您正在运行防火墙，请运行以下命令以允许HTTP和HTTPS通信： ###

sudo firewall-cmd --permanent --zone=public --add-service=http 
    sudo firewall-cmd --permanent --zone=public --add-service=https
    
    sudo firewall-cmd --reload

### 14.nginx 重启 ###

方法一：进入nginx可执行目录sbin下，输入命令

nginx -s reload

方法二：查找当前nginx进程号，然后输入命令：kill -HUP 进程号 实现重启nginx服务

### 15.nginx 配置文件检测 ###

nginx -t -c /etc/nginx/nginx.conf

### 16.配置nginx支持https ###

先去阿里云获取SSL证书，获取pem和key文件

#user  nobody;
    worker_processes  1;
    
    #error_log  logs/error.log;
    #error_log  logs/error.log  notice;
    #error_log  logs/error.log  info;
    
    #pid        logs/nginx.pid;
    pid        /usr/local/nginx/nginx.pid;
    
    events {
        worker_connections  1024;
    }
    
    
    http {
        include       mime.types;
        default_type  application/octet-stream;
    
        #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
        #                  '$status $body_bytes_sent "$http_referer" '
        #                  '"$http_user_agent" "$http_x_forwarded_for"';
    
        #access_log  logs/access.log  main;
    
        sendfile        on;
        #tcp_nopush     on;
    
        #keepalive_timeout  0;
        keepalive_timeout  65;
    
        #gzip  on;
        server {
            listen 80;
            server_name www.kkk.com;
            charset utf-8;
            #access_log logs /host.access.log main;
            return 301 https://$server_name$request_uri; 
        }
    
        server {
            listen 443 ssl;
            server_name www.kkk.com;
    
            ssl on;
            ssl_certificate /home/ssl/111_www.kkk.com.pem;
            ssl_certificate_key /home/ssl/111_www.kkk.com.key;
            ssl_session_timeout 5m;
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
            ssl_prefer_server_ciphers on;
    
    
            #charset koi8-r;
    
            #access_log  logs/host.access.log  main;
    
            location / {
                root   html;
                index  index.html index.htm;
            }
    
            #error_page  404              /404.html;
    
            # redirect server error pages to the static page /50x.html
            #
            error_page   500 502 503 504  /50x.html;
            location = /50x.html {
                root   html;
            }
    
            # proxy the PHP scripts to Apache listening on 127.0.0.1:80
            #
            #location ~ \.php$ {
            #    proxy_pass   http://127.0.0.1;
            #}
    
            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
            #
            #location ~ \.php$ {
            #    root           html;
            #    fastcgi_pass   127.0.0.1:9000;
            #    fastcgi_index  index.php;
            #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            #    include        fastcgi_params;
            #}
    
            # deny access to .htaccess files, if Apache's document root
            # concurs with nginx's one
            #
            #location ~ /\.ht {
            #    deny  all;
            #}
        }
    
    
        # another virtual host using mix of IP-, name-, and port-based configuration
        #
        #server {
        #    listen       8000;
        #    listen       somename:8080;
        #    server_name  somename  alias  another.alias;
    
        #    location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
        #}
    
    
    
    }

### 设置开机自启动 ###

vi /usr/lib/systemd/system/nginx.service

内容

[Unit]
    Description=nginx
    After=network.target
      
    [Service]
    Type=forking
    ExecStart=/usr/sbin/nginx  -c /etc/nginx/nginx.conf
    ExecReload=/usr/sbin/nginx -s reload
    ExecStop=/usr/sbin/nginx -s quit
    PrivateTmp=true
      
    [Install]
    WantedBy=multi-user.target

解释

[Unit]:服务的说明
    Description:描述服务
    After:描述服务类别
    [Service]服务运行参数的设置
    Type=forking是后台运行的形式
    ExecStart为服务的具体运行命令
    ExecReload为重启命令
    ExecStop为停止命令
    PrivateTmp=True表示给服务分配独立的临时空间
    注意：[Service]的启动、重启、停止命令全部要求使用绝对路径
    [Install]运行级别下服务安装的相关设置，可设置为多用户，即系统运行级别为3

开机自启动：
    systemctl enable nginx.service
    启动：
    systemctl start nginx.service
    停止：
    systemctl stop nginx.service
    状态：
    systemctl status nginx.service