Linux下安装nginx详细步骤

迷南。 2023-10-07 20:55 56阅读 0赞

### 1、安装四个依赖 ###

yum -y install gcc zlib zlib-devel pcre-devel openssl openssl-devel

### **2、下载并解压安装包** ###

yum -y install wget
    wget http://nginx.org/download/nginx-1.13.7.tar.gz
    tar -zxvf nginx-1.13.7.tar.gz

### 3、配置安装路径、编译、安装 ###

源码的安装一般由有这三个步骤：配置(configure)、编译(make)、安装(make install)  
–prefix选项是配置安装的路径，如果不配置该选项，安装后可执行文件默认放在/usr /local/bin

cd nginx-1.13.7
    
    #配置安装路径，--with-http_ssl_module表示添加https的ssl模块
    ./configure --prefix=/usr/local/nginx --with-http_ssl_module
    
    
    #编译
    make
    
    #安装
    make install

### 4、修改配置文件 ###

vi /usr/local/nginx/conf/nginx.conf

worker_processes  1;
    events {
        worker_connections  1024;
    }
    http {
        include       mime.types;
        default_type  application/octet-stream;
    	server_tokens off;  #隐藏版本，防止信息泄露
    	autoindex off;      #防止目录遍历
    
        sendfile        on;
        keepalive_timeout  65;
    	
    	
    	upstream myserver{
    		server 192.168.1.201:8081;
    		server 192.168.1.202:8081;
    		server 192.168.1.203:8081;
    	}
    
        server {
            listen       8080; #监听端口
            server_name  localhost;
    
            location / {
    			proxy_pass http://myserver;
            }
    
    		if ($request_method !~* GET|POST) { #禁用不安全的http方法，按需添加业务中所用方法
    			return 503;
    		}
    
        }
    
    }

配置https需要准备两个证书，证书生成方式：[https://blog.csdn.net/u014644574/article/details/126190061][https_blog.csdn.net_u014644574_article_details_126190061]  
/usr/local/nginx/cert/server.crt 格式如下：

-----BEGIN CERTIFICATE-----
    MIIDNDCCAhwCCQDQHlYQwzCR1zANBgkqhkiG9w0BAQsFADBcMQswCQYDVQQGEwJD
    ...
    rZ5mI+4PNC4=
    -----END CERTIFICATE-----

/usr/local/nginx/cert/server.key 格式如下：

vi /usr/local/nginx/conf/nginx.conf

worker_processes  1;
    events {
        worker_connections  1024;
    }
    http {
        include       mime.types;
        default_type  application/octet-stream;
        sendfile        on;
        keepalive_timeout  65;
    
        server {
            listen       80;
            server_name  localhost;
    
            location / {
                proxy_pass http://192.168.1.201:8080;
            }
         }
    
        server {
            listen       443 ssl;
            server_name  localhost;
    
            ssl_certificate     /usr/local/nginx/cert/server.crt;
            ssl_certificate_key  /usr/local/nginx/cert/server.key;
    
            location / {
                proxy_pass https://192.168.1.201:8443;
            }
        }
    
    }

**5、启动、重启、关闭 nginx**

cd /usr/local/nginx/sbin/
    
    #启动
    ./nginx
    
    #重启
    ./nginx -s reload
    
    #关闭
    ./nginx -s quit
    
    
    #查看进程
    ps -ef|grep nginx

### 6、ngin脚本语法 ###

[Nginx location 语法匹配详解，渗透漏洞WEB-INF文件泄露修复\_小百菜的博客-CSDN博客][Nginx location _WEB-INF_-CSDN]

[https_blog.csdn.net_u014644574_article_details_126190061]: https://blog.csdn.net/u014644574/article/details/126190061
[Nginx location _WEB-INF_-CSDN]: https://blog.csdn.net/u014644574/article/details/121920975