架构师必会，nginx服务的搭建（从入门到高手的第三步）

一，安装部分

1、环境安装

yum -y install gcc gcc-c++ make pcre-devel zlib-devel

2、软件编译安装

tar zxf nginx-1.12.2.tar.gz -C /opt/
cd /opt/nginx-1.12.2/

./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_stub_status_module

make && make install

3、service和systemctl的优化

ln -s /usr/local/nginx/sbin/* /usr/local/sbin/
useradd -M -s /sbin/nologin nginx

nginx -t #检查语法
nginx #启动

此时进程中有nginx服务

（1）接下进一步优化管理:systemctl
vim /etc/init.d/nginx

#!/bin/bash
# chkconfig: - 99 20							
# description: Nginx Service Control Script
COM="/usr/local/nginx/sbin/nginx"				
PID="/usr/local/nginx/logs/nginx.pid"			
case "$1" in
start)
   $COM
   ;;
stop)
   kill -s QUIT $(cat $PID)
   ;;
restart)
   $0 stop
   $0 start
   ;;
reload)
   kill -s HUP $(cat $PID)
   ;;
*)
       echo "Usage: $0 {start|stop|restart|reload}"
       exit 1
esac
exit 0

chmod +x /etc/init.d/nginx
chkconfig --add nginx

systemctl stop nginx
systemctl start nginx #可以用该命令进行管理了

（2）优化管理:service

vim /usr/lib/systemd/system/nginx.service


[Unit]
Description=nginx
After=network.target
[Service]
Type=forking
PIDFile =/usr/local/nginx/logs/nginx.pid
ExecStart=/usr/local/nginx/sbin/nginx
ExecReload=/bin/kill -s HUP $MAINPID
ExecStop=/bin/kill -s QUIT $MAINPID
PrivateTmp=true
[Install]
WantedBy=multi-user.targe

chmod 754 /lib/systemd/system/nginx.service #设置754权限，安全优化
systemctl start nginx.service
systemctl enable nginx.service

（如果开启失败，lsof -i:80,查看占用80零端口的服务，并杀死）

二，nginx文件配置

cp /usr/local/nginx/conf/nginx.conf /usr/local/nginx/conf/nginx.conf.bak #先做备份
vim /usr/local/nginx/conf/nginx.conf

server {
         listen       80;
         server_name  www.mayun.com;       #第37行修改
    
    	 #charset UTF-8;                  #第39行 改成UTF-8中文字符
       
 
       
   	 

vim /etc/hosts添加映射

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.100.7 www.mayun.com     #添加本行内容

登录www.mayun.com成功

三，设计访问状态统计

vim /usr/local/nginx/conf/nginx.conf

 server {
        listen       80;
        server_name  www.mayun.com;

        #charset UTF-8;

        #access_log  logs/host.access.log  main;

        location / {
            root   html;
            index  index.html index.htm;
        }

	location /status {   #在44行添加三行内容
		stub_status on;
		access_log off；
		}
		

访问http://192.168.100.7/status或者是 www.mayun.com/status

四、访问控制

1、安装

yum -y install httpd-tools

2、设置登录需要账号和密码

htpasswd -c /usr/local/nginx/passwd.db zhangsan
#输入两次一样的密码

chown nginx /usr/local/nginx/passwd.db
chmod 400 /usr/local/nginx/passwd.db

nginx -t

systemctl restart nginx.service

vim /usr/local/nginx/conf/nginx.conf

location / {
            auth_basic "secret";
            auth_basic_user_file /usr/local/nginx/passwd.db;            #添加这两行
            root   html;
            index  index.html index.htm;
        }

输入zhangsan和密码

3、设置黑名单限制登录

原本192.168.100.6可以登录

服务端vim /usr/local/nginx/conf/nginx.conf

 location / {
            root   html;
            index  index.html index.htm;
            deny 192.168.100.6;     #拒绝该ip
            allow all;
        }

systemctl stop nginx
systemctl start ngin

在客户端再次访问则直接被拒绝

五，虚拟主机

1、基于不同域名的

vim /etc/hosts
添加www.accp.com www.benet.com

mkdir -p /var/www/html/accp
mkdir -p /var/www/html/benet

echo "<h1> www.accp.com</h1>" >/var/www/html/accp/index.html
echo "<h1> www.benet.com</h1>" > /var/www/html/benet/index.html

(3)修改配置文件

vim /usr/local/nginx/conf/nginx.conf

    server {
        listen       80;
        server_name  www.accp.com;
        charset utf-8;
        access_log logs/accp.access.log;
        location / {
            root /var/www/html/accp;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
}


    server {
        listen       80;
        server_name  www.benet.com;
        charset utf-8;
        access_log logs/benet.access.log;
        location / {
            root /var/www/html/benet;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
}

2、基于不同端口

mkdir -p /var/www/html/accp8080
vim /var/www/html/accp8080/index.html

<h1> www.accp8080.com</h1>

vim /usr/local/nginx/conf/nginx.conf
在原来基础上添加一下内容

    server {
        listen      192.168.100.7:8080;
        server_name  www.accp.com;
        charset utf-8;
        access_log logs/accp8080.access.log;
        location / {
            root /var/www/html/accp8080;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
}

nginx -t
netstat -antp |grep nginx

tcp        0      0 192.168.100.7:8080      0.0.0.0:*               LISTEN      102009/nginx: maste
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      102009/nginx: maste
#出现两端口

3、基于不同ip

ifconfig ens32:0 192.168.100.100/24

mkdir -p /var/www/html/benet100

vim /var/www/html/benet100/index.html

<h1> www.benet100.com </h1>

vim /etc/hosts

192.168.100.100 www.benet.com  #删除之前www.benet.com,新添加

vim /usr/local/nginx/conf/nginx.conf
设置以ip加端口的形式

 server {
        listen      192.168.100.7:80;
        server_name  www.accp.com;
        charset utf-8;
        access_log logs/accp.access.log;
        location / {
            root /var/www/html/accp;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
}

    server {
        listen       192.168.100.100:80;
        server_name  www.benet.com;
        charset utf-8;
        access_log logs/benet100.access.log;
        location / {
            root /var/www/html/benet100;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
}

nginx -t
systemctl restart nginx.service

实现两个网站的都能访问