Nginx 服务器安装与配置

一、安装

1、首先安装缺少的依赖包
[root@localhost /]# yum -y install gcc gcc-c++ make libtool zlib zlib-devel openssl openssl-devel pcre pcre-devel
  • zlib zlib-devel #为nginx提供gzip模块,需要zlib库支持
  • openssl openssl-devel #为nginx提供ssl功能
  • pcre pcre-devel #为支持地址重写rewrite功能
2、下载并解压Nginx
[root@localhost src]# wget http://nginx.org/download/nginx-1.13.3.tar.gz
[root@localhost src]# tar xvf nginx-1.13.3.tar.gz
[root@localhost src]# cd nginx-1.13.3
3、编译安装

为了后续准备我们另外下载2个插件模块:nginx_upstream_check_module-0.3.0.tar.gz —— 检查后端服务器的状态nginx-goodies-nginx-sticky-module-ng-bd312d586752.tar.gz(建议在/usr/local/src下解压后将目录重命名为nginx-sticky-module-ng-1.2.5)* —— 后端做负载均衡解决session sticky问题*

# 下载文件并重新命名
[root@localhost src]# wget -O "nginx_upstream_check_module-0.3.0.tar.gz" https://codeload.github.com/yaoweibin/nginx_upstream_check_module/tar.gz/v0.3.0
[root@localhost nginx-1.13.3]# wget -O "nginx-sticky-module-ng-1.2.5.zip" https://bitbucket.org/nginx-goodies/nginx-sticky-module-ng/get/08a395c66e42.zip

# 解压文件并重命名目录
[root@localhost src]# tar -xvf nginx_upstream_check_module-0.3.0.tar.gz
[root@localhost src]# unzip nginx-sticky-module-ng-1.2.5.zip
[root@localhost src]# mv nginx-goodies-nginx-sticky-module-ng-08a395c66e42/ nginx-sticky-module-ng-1.2.5
[root@localhost nginx-1.13.3]# ./configure \
--prefix=/usr/local/nginx \
--with-pcre \
--user=nginx \
--group=nginx \
--with-http_stub_status_module \
--with-http_ssl_module \
--with-http_gzip_static_module \
--with-http_realip_module \
--pid-path=/usr/local/nginx/run/nginx.pid \
--without-mail_pop3_module \
--without-mail_imap_module \
--without-mail_smtp_module \
--add-module=../nginx_upstream_check_module-0.3.0 \
--add-module=../nginx-sticky-module-ng-1.2.5
[root@localhost nginx-1.13.3]# make
[root@localhost nginx-1.13.3]# make install

make的地方有一个小技巧,如果服务器是双核,可以通过-j2来指定用双核进行编译,-j4代表4核编译。

常用编译选项说明

  • –prefix=PATH : 指定nginx的安装目录。默认 /usr/local/nginx
  • –conf-path=PATH : 设置nginx.conf配置文件的路径。nginx允许使用不同的配置文件启动,通过命令行中的-c选项。默认为prefix/conf/nginx.conf
  • –user=name: 设置nginx工作进程的用户。安装完成后,可以随时在nginx.conf配置文件更改user指令。默认的用户名是nobody。–group=name类似
  • –with-pcre : 设置PCRE库的源码路径,如果已通过yum方式安装,使用–with-pcre自动找到库文件。使用–with-pcre=PATH时,需要从PCRE网站下载pcre库的源码(版本4.4 - 8.30)并解压,剩下的就交给Nginx的./configure和make来完成。perl正则表达式使用在location指令和 ngx_http_rewrite_module模块中。
  • –with-zlib=PATH : 指定 zlib(版本1.1.3 - 1.2.5)的源码解压目录。在默认就启用的网络传输压缩模块ngx_http_gzip_module时需要使用zlib 。
  • –with-http_ssl_module : 使用https协议模块。默认情况下,该模块没有被构建。前提是openssl与openssl-devel已安装
  • –with-http_stub_status_module : 用来监控 Nginx 的当前状态
  • –with-http_realip_module : 通过这个模块允许我们改变客户端请求头中客户端IP地址值(例如X-Real-IP 或 X-Forwarded-For),意义在于能够使得后台服务器记录原始客户端的IP地址
  • –add-module=PATH : 添加第三方外部模块,如nginx-sticky-module-ng或缓存模块。每次添加新的模块都要重新编译(Tengine可以在新加入module时无需重新编译)

二、配置

1、创建 Nginx 运行使用的用户 www
[root@localhost conf]# groupadd nginx 
[root@localhost conf]# useradd -g nginx nginx
2、配置nginx.conf

nginx默认的配置文件也是可以使nginx正常启动。这里另外提供一份配置文件的示例。

下面的nginx.conf简单的实现nginx在前端做反向代理服务器的例子,处理js、png等静态文件,jsp等动态请求转发到其它服务器

[root@localhost conf]#  cat /usr/local/nginx/conf/nginx.conf
user  nginx nginx;
worker_processes  2;
error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
pid        /usr/local/nginx/run/nginx.pid;
events {
    use epoll;
    worker_connections  2048;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
    #access_log  logs/access.log  main;
    sendfile        on;
    # tcp_nopush     on;
    keepalive_timeout  65;
  # gzip压缩功能设置
    gzip on;
    gzip_min_length 1k;
    gzip_buffers    4 16k;
    gzip_http_version 1.0;
    gzip_comp_level 6;
    gzip_types text/html text/plain text/css text/javascript application/json application/javascript application/x-javascript application/xml;
    gzip_vary on;

  # http_proxy 设置
    client_max_body_size   10m;
    client_body_buffer_size   128k;
    proxy_connect_timeout   75;
    proxy_send_timeout   75;
    proxy_read_timeout   75;
    proxy_buffer_size   4k;
    proxy_buffers   4 32k;
    proxy_busy_buffers_size   64k;
    proxy_temp_file_write_size  64k;
    proxy_temp_path   /usr/local/nginx/proxy_temp 1 2;
  # 设定负载均衡后台服务器列表 
    upstream  backend  { 
              #ip_hash; 
              server   192.168.10.100:8080 max_fails=2 fail_timeout=30s ;  
              server   192.168.10.101:8080 max_fails=2 fail_timeout=30s ;  
    }
  # 很重要的虚拟主机配置
    server {
        listen       80;
        server_name  itoatest.example.com;
        root   /apps/oaapp;
        charset utf-8;
        access_log  logs/host.access.log  main;
        #对 / 所有做负载均衡+反向代理
        location / {
            root   /apps/oaapp;
            index  index.jsp index.html index.htm;
            proxy_pass        http://backend;  
            proxy_redirect off;
            # 后端的Web服务器可以通过X-Forwarded-For获取用户真实IP
            proxy_set_header  Host  $host;
            proxy_set_header  X-Real-IP  $remote_addr;  
            proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;
            proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;

        }
        #静态文件,nginx自己处理,不去backend请求tomcat
        location  ~* /download/ {  
            root /apps/oa/fs;  

        }
        location ~ .*\.(gif|jpg|jpeg|bmp|png|ico|txt|js|css)$   
        {   
            root /apps/oaapp;   
            expires      7d; 
        }
        location /nginx_status {
            stub_status on;
            access_log off;
            allow 192.168.10.0/24;
            deny all;
        }
        location ~ ^/(WEB-INF)/ {   
            deny all;   
        }
        #error_page  404              /404.html;
        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
  ## 其它虚拟主机,server 指令开始
}
3、检查配置文件ngnix.conf的正确性命令
[root@localhost conf]# /usr/local/nginx/sbin/nginx -t

三、添加为系统服务

Nginx安装完成后默认不会注册为系统服务,所以需要手工添加系统服务脚本。在/etc/init.d目录下新建nginx文件,并更改权限其即可。

1、新建nginx启动脚本
[root@localhost src]# vim /etc/init.d/nginx

#!/bin/bash
#
# nginx - this script starts and stops the nginx daemin
#
# chkconfig: - 85 15
# description: Nginx is an HTTP(S) server, HTTP(S) reverse \
# proxy and IMAP/POP3 proxy server
# processname: nginx
# config: /usr/local/nginx/conf/nginx.conf
# pidfile: /usr/local/nginx/logs/nginx.pid

nginxd=/usr/local/nginx/sbin/nginx
nginx_config=/usr/local/nginx/conf/nginx.conf
nginx_pid=/usr/local/nginx/logs/nginx.pid

RETVAL=0
prog="nginx"

# Source function library.
. /etc/rc.d/init.d/functions

# Source networking configuration.
. /etc/sysconfig/network

# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0
[ -x $nginxd ] || exit 0

# Start nginx daemons functions.
start(){

        if [ -e $nginx_pid ]; then
                echo "nginx already running..."
                exit 1
        fi
        echo -n $"Starting $prog:"
        daemon $nginxd -c ${nginx_config}
        RETVAL=$?
        echo
        [ $RETVAL = 0 ] && touch /var/lock/subsys/nginx
        return $RETVAL
}

# Stop nginx daemons functions.
stop(){
        echo -n $"Stopping $prog:"
        killproc $nginxd
        RETVAL=$?
        echo
        [ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx $nginx_pid
}

#reload nginx service functions.
reload(){
        echo -n $"Reloading $proc:"
        killproc $nginxd -HUP
        RETVAL=$?
        echo
}
# See how we were called.
case "$1" in
        start)
                start
                ;;
        stop)
                stop
                ;;
        reload)
                reload
                ;;
        restart)
                stop
                start
                ;;
        status)
                status $prog
                RETVAL=$?
                ;;
        *)
                echo $"Usage: $prog {start|stop|restart|reload|status|help}"
                exit 1
esac

exit $RETVAL
2、修改其权限并开机启动
  1. 修改权限:chmod 755 /etc/init.d/nginx
  2. 加为系统服务:chkconfig –add nginx
  3. 开机启动:chkconfig nginx on
  4. 查看开机启动的服务:chkconfig –list
3、备注
  • 启动服务:service nginx start
  • 停止服务:service nginx stop
  • 重启服务:service nginx reload
附:另一种添加nginx命令的方法
1、配置环境变量
[root@localhost nginx-1.13.3]# vim /etc/profile.d/nginx.sh
export PATH=/usr/local/nginx/sbin:$PATH
2、加载刚设置的变量
[root@localhost nginx-1.13.3]# source /etc/profile
3、下面是几个nginx常用的命令,如果您可以正常使用这些命令,那么说明nginx已经安装成功了
  • nginx:直接在命令行键入nginx,就可以启动nginx。
  • nginx -t:检查配置文件是否正确。这个命令可以检查nginx.conf配置文件其格式、语法是否正确。如果配置文件存在错误,则会出现相应提示;如果nginx.conf文件正确,也会出现相应的成功提示。
  • nginx -s reload:重加载/重启nginx——以新的nginx.conf配置文件中的定义。
  • nginx -s stop:停止nginx。

附、安装过程中的问题

1、nginx启动后,使用“systemctl status nginx”查看启动状态
[root@localhost logs]# systemctl status nginx
● nginx.service - SYSV: Nginx is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3 proxy server
   Loaded: loaded (/etc/rc.d/init.d/nginx; bad; vendor preset: disabled)
   Active: active (running) since2017-07-20 17:00:44 CST; 39min ago
     Docs: man:systemd-sysv-generator(8)
  Process: 2968 ExecStart=/etc/rc.d/init.d/nginx start (code=exited, status=0/SUCCESS)
 Main PID: 2971 (nginx)
   CGroup: /system.slice/nginx.service
           ├─2971 nginx: master process /usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf
           └─2973 nginx: worker process

720 17:00:44 localhost systemd[1]: Starting SYSV: Nginx is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3 proxy server...
720 17:00:44 localhost nginx[2968]: /etc/rc.d/init.d/nginx: 第 26 行:[: =: 期待一元表达式
720 17:00:44 localhost nginx[2968]: Starting nginx:[  确定  ]
720 17:00:44 localhost systemd[1]: PID file /usr/local/nginx/logs/nginx.pid not readable (yet?) after start. 

问题1、/etc/rc.d/init.d/nginx: 第 26 行:[: =: 期待一元表达式

决解方法:[ “$yn” != “” ]变量那加引号。

问题2、PID file /usr/local/nginx/logs/nginx.pid not readable (yet?) after start.

决解方法:
1.建立nginx运行的组和用户,并将相应的目录分配给新建的组和用户。
2.修改目录权限为可读可写:chmod -R 766 logs/

2、启动不了
720 16:17:51 localhost nginx[2671]: Starting nginx:nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
720 16:17:51 localhost nginx[2671]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
720 16:17:52 localhost nginx[2671]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
720 16:17:52 localhost nginx[2671]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
720 16:17:53 localhost nginx[2671]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
720 16:17:53 localhost nginx[2671]: nginx: [emerg] still could not bind()
720 16:17:53 localhost nginx[2671]: [失败]
720 16:17:53 localhost systemd[1]: nginx.service: control process exited, code=exited status=1
720 16:17:53 localhost systemd[1]: Failed to start SYSV: Nginx is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3 proxy server.

查看端口是否被占用

  • 0
    点赞
  • 2
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值