Linux系统安装nginx并配置反向代理

安装nginx

1、安装依赖

yum install -y gcc pcre-devel zlib-devel openssl openssl-devel

2、下载nginx

mkdir -p /www/nginx
cd /www/nginx
wget http://nginx.org/download/nginx-1.21.0.tar.gz
tar -xvf nginx-1.21.0.tar.gz

3、安装nginx

cd nginx-1.21.0
先看 /usr/local/nginx 目录是否存在，不存在就创建：
mkdir -p /usr/local/nginx
指定安装路径：
./configure --prefix=/usr/local/nginx
make && make install

我这里使用的是docker启动的服务，以filebrowser Web文件管理器为例，我使用docker启动后访问端口为8989

4、修改配置文件

打开配置文件

vi /usr/local/nginx/conf/nginx.conf

# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

# Load dynamic modules. See /usr/share/doc/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}

http {
    proxy_headers_hash_max_size 512;
    proxy_headers_hash_bucket_size 64;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    include /etc/nginx/conf.d/*.conf;

    # -------- wenjian.bykhxp.cn --------
    server {
        listen       80;                            #指定 Nginx 监听 80 端口。
        listen       [::]:80;                       
        server_name  wenjian.bykhxp.cn;                 #使用自己解析的域名，没有域名的可以不填。
        root         /usr/share/nginx/html;         

        location / {
            proxy_pass http://127.0.0.1:8989;        #将所有请求反向代理到http://127.0.0.1:8080。
            proxy_set_header Host $host;             #设置请求头，确保后端服务器能够获取客户端的真实信息。
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }

        include /etc/nginx/default.d/*.conf;

        error_page 404 /404.html;
        location = /404.html { }

        error_page 500 502 503 504 /50x.html;
        location = /50x.html { }
    }
# 配置证书后使用https访问
    server {
        listen       443 ssl http2;         #指定 Nginx 监听 443 端口
        listen       [::]:443 ssl http2;    
        server_name  wenjian.bykhxp.cn;         #使用自己解析的域名。
        root         html;
        index        index.html index.htm;

        ssl_certificate     /etc/nginx/cert/cert.pem;
        ssl_certificate_key /etc/nginx/cert/cert.key;
        ssl_session_cache   shared:SSL:1m;
        ssl_session_timeout 5m;
        ssl_ciphers         HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers on;

        location / {
            proxy_pass http://127.0.0.1:8989;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_ssl_verify off;
        }

        include /etc/nginx/default.d/*.conf;

        error_page 404 /404.html;
        location = /404.html { }

        error_page 500 502 503 504 /50x.html;
        location = /50x.html { }
    }
}

5、重启nginx

cd /usr/local/nginx/sbin/
./nginx -s reload

在浏览器访问https://localhost_ip:8989,输入用户名及密码登录即可

注意

如果是云服务器无法访问的情况需要在安全组配置端口开