mkdir vhost;
【nginx.conf】
user www www;
worker_processes 1;error_log logs/error.log notice;
pid logs/nginx.pid;
worker_rlimit_nofile 5120;
events {
use epoll;
worker_connections 5120;
}
http {include mime.types;
default_type application/octet-stream;
server_names_hash_bucket_size 128;client_header_buffer_size 32k;
large_client_header_buffers 4 32k;
client_max_body_size 22m;
limit_conn_zone $binary_remote_addr zone=one:32k;
sendfile on;tcp_nopush on;
keepalive_timeout 60;
tcp_nodelay on;
gzip on;gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_http_version 1.0;
gzip_comp_level 2;
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;
log_format wwwlogs '$remote_addr - $remote_user [$time_local] $request $status $body_bytes_sent $http_referer $http_user_agent $http_x_forwarded_for';
#include default.conf;
include vhost/*.conf;
}
【vhost/default.conf】
server {
listen 80;
server_name localhost;
root html;
index index.php index.htm index.html;
location ~ \.php$ {fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $DOCUMENT_ROOT$fastcgi_script_name;
include fastcgi_params;
}
location ~ /\.ht {deny all;
}
location / {
if (!-e $request_filename) {
rewrite ^(.*)$ /index.php?s=/$1 last;
}
}
}
mkdir cert;
【证书设置】
server {
listen 443;
ssl on;
ssl_certificate cert/xxxxxxx.crt;
ssl_certificate_key cert/xxxxxxx.key;
ssl_prefer_server_ciphers on;
ssl_session_timeout 10m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
server_name localhost;
root html;
index index.php index.htm index.html;
location ~ \.php$ {fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $DOCUMENT_ROOT$fastcgi_script_name;
include fastcgi_params;
}
location ~ /\.ht {deny all;
}
location / {
if (!-e $request_filename) {
rewrite ^(.*)$ /index.php?s=/$1 last;
}
}
}