nginx日常使用(三)

nginx-nginx.conf文件拆分配置

user root;

worker_processes auto;

 

error_log /var/log/nginx/error.log warn;

pid /var/run/nginx.pid;

events {

worker_connections 1024;

}

http {

include /etc/nginx/mime.types;

default_type application/octet-stream;

 

log_format main '$remote_addr - $remote_user [$time_local] "$request" '

'$status $body_bytes_sent "$http_referer" '

'"$http_user_agent" "$http_x_forwarded_for"';

 

access_log /var/log/nginx/access.log main;

sendfile on;

#tcp_nopush on;

keepalive_timeout 65;

autoindex on;

#gzip on;

include /etc/nginx/conf.d/*.conf;

client_max_body_size 100M;

client_header_buffer_size 128k;

large_client_header_buffers 4 128k;

}

 

http协议配置:

server {

listen 80;

charset utf-8;

server_name exam.allhome.com.cn;

location / {

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Nginx-Proxy true;

proxy_set_header Connection "";

proxy_pass http://172.18.0.1:8099/;

}

}

 

https协议配置:

server {

listen 80;

listen 443 ssl;

charset utf-8;

server_name maven.xxx.com.cn;

ssl on;

ssl_certificate cert/214616242990879.pem;

ssl_certificate_key cert/214616242990879.key;

location / {

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Nginx-Proxy true;

proxy_set_header Connection "";

proxy_set_header Host $host:$server_port;

proxy_pass http://172.18.0.1:9000;

}

}

负载均衡配置:

1. http {
2. upstream myapp1 {
3. server 192.168.0.201:3334;
4. server 192.168.0.201:3335;
5. server 192.168.0.201:3336;
6. }
7.  
8. server {
9. listen 80;
10. location / {
11. proxy_pass http://myapp1;
12. }
13. }

http与https绑定跳转:

server {

listen 80;

server_name finance.xxx.com.cn;

rewrite ^(.*) https://xxx.allhome.com.cn$1 permanent;

location / {

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header Host $http_host;

proxy_pass http://172.17.0.1:8083/;

}

}

 

server

{

listen 443;

server_name finance.xxx.com.cn;

ssl on;

root html;

index index.html index.htm;

ssl_certificate cert/214616242990879.pem;

ssl_certificate_key cert/214616242990879.key;

ssl_session_timeout 5m;

ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_prefer_server_ciphers on;

location / {

proxy_set_header X-Real-IP $remote_addr;

 

proxy_set_header Host $http_host;

 

proxy_pass http://172.17.0.1:8083;

}

}

 

转载于:https://my.oschina.net/u/3729326/blog/1831694