Nginx on Canghai's Blog

Nginx on Canghai's Bloghttps://blog-width-preview-20260711.pages.dev/tags/nginx/Recent content in Nginx on Canghai's BlogHugozhMon, 08 Sep 2025 00:00:00 +0000简单的Nginx配置https://blog-width-preview-20260711.pages.dev/posts/learn/221015-config-of-nginx/Sat, 15 Oct 2022 00:00:00 +0000https://blog-width-preview-20260711.pages.dev/posts/learn/221015-config-of-nginx/<h4 id="debian下快速安装nginx">Debian下快速安装Nginx</h4> <ul> <li>推荐使用docker安装</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">mkdir</span> <span class="o">-</span><span class="n">p</span> <span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">config</span> <span class="o">&&</span> <span class="n">vim</span> <span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">config</span><span class="o">/</span><span class="n">nginx</span><span class="p">.</span><span class="n">conf</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-gdscript3" data-lang="gdscript3"><span class="line"><span class="cl"><span class="n">user</span> <span class="n">nginx</span><span class="p">;</span> </span></span><span class="line"><span class="cl"><span class="n">worker_processes</span> <span class="n">auto</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="n">error_log</span> <span class="o">/</span><span class="k">var</span><span class="o">/</span><span class="nb">log</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">error</span><span class="o">.</span><span class="n">log</span> <span class="n">notice</span><span class="p">;</span> </span></span><span class="line"><span class="cl"><span class="n">pid</span> <span class="o">/</span><span class="k">var</span><span class="o">/</span><span class="n">run</span><span class="o">/</span><span class="n">nginx</span><span class="o">.</span><span class="n">pid</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="n">events</span> <span class="p">{</span> </span></span><span class="line"><span class="cl"> <span class="n">worker_connections</span> <span class="mi">1024</span><span class="p">;</span> </span></span><span class="line"><span class="cl"><span class="p">}</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="n">http</span> <span class="p">{</span> </span></span><span class="line"><span class="cl"> <span class="n">include</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">mime</span><span class="o">.</span><span class="n">types</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> <span class="n">default_type</span> <span class="n">application</span><span class="o">/</span><span class="n">octet</span><span class="o">-</span><span class="n">stream</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"> <span class="n">log_format</span> <span class="n">main</span> <span class="s1">'$remote_addr - $remote_user [$time_local] "$request" '</span> </span></span><span class="line"><span class="cl"> <span class="s1">'$status $body_bytes_sent "$http_referer" '</span> </span></span><span class="line"><span class="cl"> <span class="s1">'"$http_user_agent" "$http_x_forwarded_for"'</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"> <span class="n">access_log</span> <span class="o">/</span><span class="k">var</span><span class="o">/</span><span class="nb">log</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">access</span><span class="o">.</span><span class="n">log</span> <span class="n">main</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"> <span class="n">sendfile</span> <span class="n">on</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> <span class="n">tcp_nopush</span> <span class="n">on</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"> <span class="n">keepalive_timeout</span> <span class="mi">65</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"> <span class="n">gzip</span> <span class="n">on</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"> <span class="n">include</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">conf</span><span class="o">.</span><span class="n">d</span><span class="o">/*.</span><span class="n">conf</span><span class="p">;</span> </span></span><span class="line"><span class="cl"><span class="p">}</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="n">stream</span><span class="p">{</span> </span></span><span class="line"><span class="cl"> <span class="n">log_format</span> <span class="n">proxy</span> <span class="s1">'$remote_addr [$time_local] '</span> </span></span><span class="line"><span class="cl"> <span class="s1">'$protocol $status $bytes_sent $bytes_received '</span> </span></span><span class="line"><span class="cl"> <span class="s1">'$session_time "$upstream_addr" '</span> </span></span><span class="line"><span class="cl"> <span class="s1">'"$upstream_bytes_sent" "$upstream_bytes_received" "$upstream_connect_time"'</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"> <span class="n">access_log</span> <span class="o">/</span><span class="k">var</span><span class="o">/</span><span class="nb">log</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">stream</span><span class="o">.</span><span class="n">log</span> <span class="n">proxy</span><span class="p">;</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"> <span class="n">include</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">conf</span><span class="o">.</span><span class="n">d</span><span class="o">/*.</span><span class="n">stream</span><span class="p">;</span> </span></span><span class="line"><span class="cl"><span class="p">}</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-docker" data-lang="docker"><span class="line"><span class="cl">docker run -d <span class="se">\ </span></span></span><span class="line"><span class="cl"> --name nginx <span class="se">\ </span></span></span><span class="line"><span class="cl"> --restart always <span class="se">\ </span></span></span><span class="line"><span class="cl"> --network host <span class="se">\ </span></span></span><span class="line"><span class="cl"> -v /opt/nginx/config/conf.d:/etc/nginx/conf.d <span class="se">\ </span></span></span><span class="line"><span class="cl"> -v /opt/nginx/config/nginx.conf:/etc/nginx/nginx.conf <span class="se">\ </span></span></span><span class="line"><span class="cl"> -v /opt/nginx/log:/var/log/nginx <span class="se">\ </span></span></span><span class="line"><span class="cl"> -v /opt/nginx/cert:/opt/cert <span class="se">\ </span></span></span><span class="line"><span class="cl"> nginx:stable<span class="err"> </span></span></span></code></pre></div><h4 id="配置cloudflare证书">配置Cloudflare证书</h4> <ul> <li>编辑证书</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">vim</span> <span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">cert</span><span class="o">/</span><span class="n">web</span><span class="p">.</span><span class="n">crt</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-cmd" data-lang="cmd"><span class="line"><span class="cl">-----BEGIN CERTIFICATE----- </span></span><span class="line"><span class="cl">MIIEFTCCAv2gAwIBAgIUTNa8COmbEvnnmyHFCWCSNbIlrowwDQYJKoZIhvcNAQEL </span></span><span class="line"><span class="cl">BQAwgagxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQH </span></span><span class="line"><span class="cl">Ew1TYW4gRnJhbmNpc2NvMRkwFwYDVQQKExBDbG91ZGZsYXJlLCBJbmMuMRswGQYD </span></span><span class="line"><span class="cl">VQQLExJ3d3cuY2xvdWRmbGFyZS5jb20xNDAyBgNVBAMTK01hbmFnZWQgQ0EgNjdh </span></span><span class="line"><span class="cl">NGUxOWE1YjBlYzNlOGEyMGI0MDNiZTQzYmI4OTcwHhcNMjIwODIyMDU0NzAwWhcN </span></span><span class="line"><span class="cl">MzcwODE4MDU0NzAwWjAiMQswCQYDVQQGEwJVUzETMBEGA1UEAxMKQ2xvdWRmbGFy </span></span><span class="line"><span class="cl">ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/Sy+00iQlMJYRCHTss </span></span><span class="line"><span class="cl">LxUbTn3DvAIUGvK8IPuYTl24ZyGVJXjI3mq10/3slUkUJLKjowScaMwwVCHwsM8M </span></span><span class="line"><span class="cl">rWIc97zRec8mjQA7ixayPSEtkXoaRC403nQEDdUqtY5bgpug6PFzZv2tUy3yxVG8 </span></span><span class="line"><span class="cl">KLQze+O1kIkw+pXvCL9nxPUEZ2SBZgDV/uBnQAZU1iZaQXtZPJaUxjQ1Wn+IBnj0 </span></span><span class="line"><span class="cl">KZUp7JidkaajcgmDq63gO++Ce6qNqQSHRNnfjFB9OoCcPR2zHOkn+cih9yNyM5XC </span></span><span class="line"><span class="cl">WCFKuPhHhuvqeIFTrt6lHMwtUrPzeq1Q63r5FemOZl45gj8NFvdoAcRF2eaJWHBI </span></span><span class="line"><span class="cl">vGUCAwEAAaOBuzCBuDATBgNVHSUEDDAKBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA </span></span><span class="line"><span class="cl">MB0GA1UdDgQWBBRnPvIl0HzOeOYRAYO0dUqWcZg5ZDAfBgNVHSMEGDAWgBRqKMUf </span></span><span class="line"><span class="cl">A2v8OOV10yFDxd0H0UD7ODBTBgNVHR8ETDBKMEigRqBEhkJodHRwOi8vY3JsLmNs </span></span><span class="line"><span class="cl">b3VkZmxhcmUuY29tL2I2M2NhZGM0LTU4Y2QtNGRhMC05ZmZlLTE0YTEzODIxMTI3 </span></span><span class="line"><span class="cl">NS5jcmwwDQYJKoZIhvcNAQELBQADggEBAAG6uWdDYpG9+9r3hMbCYUpA1hQOwh2D </span></span><span class="line"><span class="cl">viFQLgChN8OvwpAfL0MHBxpafaxOYAVODc/gLgYacAHOnYTytvX6NG6p98FivG/X </span></span><span class="line"><span class="cl">qpH2CqxUTY9zgD4aMNFSXA1LvVJ//0JcAMVe1P8MdtnIO419On3sQYwTVMTgO+Qw </span></span><span class="line"><span class="cl">mcjxX8JHQjhohO1xRdJutBA1fbcHzymjHdcIstabxyZf1eG3nLvF9SZcA8GSCSu7 </span></span><span class="line"><span class="cl">5QWVWM28EVR+VSAxMvXNbnkkuaRY2dOJdFKfc8SG9lSA/nCHprz6F32TKP4HZQay </span></span><span class="line"><span class="cl">GoxJuobHKaeI/K3WjQlDH1NAd2LWvIsPzvUBc9ugSR2DWsXYvgHs1qc= </span></span><span class="line"><span class="cl">-----END CERTIFICATE----- </span></span></code></pre></div><ul> <li>编辑私钥</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">vim</span> <span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">nginx</span><span class="o">/</span><span class="n">cert</span><span class="o">/</span><span class="n">web</span><span class="p">.</span><span class="n">key</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-cmd" data-lang="cmd"><span class="line"><span class="cl">-----BEGIN PRIVATE KEY----- </span></span><span class="line"><span class="cl">MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC/0svtNIkJTCWE </span></span><span class="line"><span class="cl">Qh07LC8VG059w7wCFBryvCD7mE5duGchlSV4yN5qtdP97JVJFCSyo6MEnGjMMFQh </span></span><span class="line"><span class="cl">8LDPDK1iHPe80XnPJo0AO4sWsj0hLZF6GkQuNN50BA3VKrWOW4KboOjxc2b9rVMt </span></span><span class="line"><span class="cl">8sVRvCi0M3vjtZCJMPqV7wi/Z8T1BGdkgWYA1f7gZ0AGVNYmWkF7WTyWlMY0NVp/ </span></span><span class="line"><span class="cl">iAZ49CmVKeyYnZGmo3IJg6ut4DvvgnuqjakEh0TZ34xQfTqAnD0dsxzpJ/nIofcj </span></span><span class="line"><span class="cl">cjOVwlghSrj4R4br6niBU67epRzMLVKz83qtUOt6+RXpjmZeOYI/DRb3aAHERdnm </span></span><span class="line"><span class="cl">iVhwSLxlAgMBAAECggEABKroJZzGWHcSLKGaA3zj2MzuzOmf4AisNTIPUJmLddIm </span></span><span class="line"><span class="cl">x3u3fmgCdxdDxTIZQD6tiLlDN+zN/s+OpIeUtDarQclrQwMLEz4HAIJYzccT7Ldz </span></span><span class="line"><span class="cl">cRF4wKUU5D7ONVzFYsuzcstodhBoT6dRie5jD1+XbMPmvlfTLTttxYs1xWG/7aeD </span></span><span class="line"><span class="cl">saHbzN7lUiWu5GWgbBYHkeU6KOr83MakGVI82Z6sCJhuQe6fTlvjiqsF5GtyvrZ8 </span></span><span class="line"><span class="cl">N2BZZVleCWAE0uXntFmezWI6HvtxSBBFSNbqequr3r0IjL8qK8qvJ2k3xYLidERi </span></span><span class="line"><span class="cl">JX5jDJ+8opSN++Ia+lcpVZQ9F9jGJfpzKvPObVFqWwKBgQDfWepiT9nXAg0UM00y </span></span><span class="line"><span class="cl">+01JXogm6aHWDgBkQTqjGyC5cuHzF3TssY7pGtyoy7OAcsEqgpyEnUTsd7WbN6Ux </span></span><span class="line"><span class="cl">Pj+TpVULOtFlJrQR+zIWWCCfC6byXw/S8m9GpBvZescYW4QkOEtQlLIi7HUYlm+Y </span></span><span class="line"><span class="cl">dHy9eWJewn5b1bI0d4WX6UhQDwKBgQDb3RIa3hAcdsKryZJNN6j/QJFQBYnv+n5Y </span></span><span class="line"><span class="cl">UXrfFEAsdX2RU0xO8otss51OMrkbZS8qCmTC+hZgvYeUhAKf9SRnO/BH18sZskNW </span></span><span class="line"><span class="cl">psws2Lq6MM0ZOjZqeVoaEvf6ESLf/bbO/IKoRbtdWdCNilQ0FYpJE27MKcLQ+miB </span></span><span class="line"><span class="cl">AjXbego4SwKBgQDODxeFkiPpEHRekaIEigLY0MUOGXf8kzhbRi7B8jIzxcCd1KNE </span></span><span class="line"><span class="cl">B+BQQT8Y364AsF50SMH8O1guTZcX17OpBcQEBIG8dYxgJN/2wuiH4tBdy5M/guKH </span></span><span class="line"><span class="cl">fLGa26bx8ysh1rTH8cPSWQ0r2TmC8K+OWNIIwKc3w3puYW4ip65x44CakwKBgQCi </span></span><span class="line"><span class="cl">91URJyIoBvs6nBleNPCF6pULDF/2yeRWkGaT7Y23poqham24Yt1ngCcMLFq6bKCt </span></span><span class="line"><span class="cl">97BCOV7W7AUP112etPT7tBjhF5mKfXCeTNowL6EQm1Wa6mQlPbfEdeTqrUL9ZjDX </span></span><span class="line"><span class="cl">caFjGvTLN+R21V6ekIzEp6vLlvS5M7K8VSgYe3gRywKBgDz3aSUDhCC3zLvpFlW6 </span></span><span class="line"><span class="cl">jDX4bOjKoOidWdOdJKA8jtv57c7DhWTtz1Pd+9uf9xvx1dwKmMrvsVmoyd2hmWXq </span></span><span class="line"><span class="cl">ZrTlwbmZlo1CqWQ8yXzFBPXRXAc+ZJvmzUWIOBS6+i8qo7UuZIHucsJGDlFbvAfE </span></span><span class="line"><span class="cl">wz7MQiazno/JrI0hYXi3jwcG </span></span><span class="line"><span class="cl">-----END PRIVATE KEY----- </span></span></code></pre></div><h4 id="快速配置nginx">快速配置Nginx</h4> <p>按照推荐的<code>nginx.conf</code>配置，其中<strong>http</strong>模块包含<code>/etc/nginx/conf.d/</code>内的所有<code>*.conf</code>文件的配置，<strong>stream</strong>模块包含<code>/etc/nginx/conf.d/</code>内的所有<code>*.stream</code>文件的配置，下面有几个例子可以参考</p>