目录

• 目录
• ngnix安装
• nginx相关修改

ngnix安装

稳定版本1.6.2下载路径 http://nginx.org/download/nginx-1.6.2.tar.gz

例如带有显示服务器状态，带有debug功能，支持ssl安装如下命令，如安装其他功能可用./configure –help查看或查看官方插件文档 ./configure –with-http_stub_status_module –with-debug –with-http_ssl_module make install

默认会安装在/usr/local/nginx，配置文件时/usr/local/nginx/conf/nginx.conf

nginx相关修改

创建nginx用户, 使用命名 useradd nginx 在nginx配置中添加nginx用户运行5个worker进程，配置如下

user nginx nginx; worker_processes 5;

配置使用epoll的IO模式，并添加debug的IP events { use epoll; worker_connections 1024; debug_connection 192.168.100.12; }

在server节点配置访问服务器状态的路径及IP访问策略 location = /stats { stub_status on; access_log off; allow 192.168.100.10; deny all; }

生成证书 $ cd /usr/local/nginx/conf $ openssl genrsa -des3 -out server.key 1024 $ openssl req -new -key server.key -out server.csr $ cp server.key server.key.org $ openssl rsa -in server.key.org -out server.key $ openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

加入节点配置如下：

server {
    listen       443 ssl;
    server_name  localhost;

    ssl_certificate      /usr/local/nginx/conf/server.crt;
    ssl_certificate_key  /usr/local/nginx/conf/server.key;

    location /app/ {
        proxy_pass  http://testproxy;
        proxy_set_header        Host            $host;
        proxy_set_header        X-Real-IP       $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        index  index.html index.jsp login.jsp index.htm;
    }
}