$ yum -y install gcc gcc-c++ automake autoconf libtool make
2.2 安装openssl
说明:nginx SSL使用。
$ cd /usr/local/src
$ wget https://www.openssl.org/source/openssl-1.0.1t.tar.gz
$ tar -zxvf openssl-1.0.1t.tar.gz
2.3 安装pcre
说明:pcre是一个正则表达式库。
$ cd /usr/local/src
$ wget https://ftp.pcre.org/pub/pcre/pcre-8.38.tar.gz
$ tar -zxvf pcre-8.38.tar.gz
$ cd pcre-8.38
$ ./configure
$ make
$ make install
2.4 安装zlib
说明:zlib是提供数据压缩用的函式库。
$ cd /usr/local/src
$ wget http://zlib.net/zlib-1.2.11.tar.gz
$ tar -zxvf zlib-1.2.11.tar.gz
$ cd zlib-1.2.11
$ ./configure
$ make
$ make install
2.5 安装nginx
说明:此示例的nginx版本为1.16.1。
$ cd /usr/local/src
$ wget http://nginx.org/download/nginx-1.16.1.tar.gz
$ tar -zxvf nginx-1.16.1.tar.gz
$ cd nginx-1.16.1
$ ./configure --with-http_ssl_module
–with-pcre=/usr/local/src/pcre-8.38
–with-zlib=/usr/local/src/zlib-1.2.11
–with-openssl=/usr/local/src/openssl-1.0.1t
$ make
$ make install
- 操作nginx
3.1 启动nginx
说明:nginx默认安装路径为 /usr/local/nginx 。
1
2
$ cd /usr/local/nginx
$ ./sbin/nginx
3.2 加载配置
1
2
/usr/local/nginx/sbin/nginx -s reload # 重新载入配置文件
/usr/local/nginx/sbin/nginx -s reopen # 重启 Nginx
3.3 停止nginx
1
$ /usr/local/nginx/sbin/nginx -s stop
- nginx配置文件
说明:包含80、443(SSL)以及反向代理。
#user root;
worker_processes 2;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
#access_log logs/access.log main;
sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
#gzip on;
upstream api {
server localhost:7001;
}
server {
listen 80;
listen 443 ssl;
server_name www.test.com;
#ssl on;
root /usr/local/nginx/html;
index index.html index.htm;
ssl_certificate /usr/local/nginx/cert/test.com.pem;
ssl_certificate_key /usr/local/nginx/cert/test.com.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
root /usr/local/nginx/html/dist;
expires 1h;
}
# api
location ^~ /api/ {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://api/;
}
}
}