我们在开发和测试环境,需要为yii2搭配环境,这里说的是安装nginx
1.安装脚本:
wget nginx.org/download/nginx-1.11.13.tar.gz
tar zxvf nginx-1.11.13.tar.gz
cd nginx-1.11.13
./configure --with-http_ssl_module --with-http_v2_module
make && make install
【 题外话:
–with-http_v2_module 配置代表开启http2模块,您可以通过下面的方式设置http2
listen 443 ssl http2;
可以通过下面的链接找到工具测试是否开启http2:https://www.kejianet.cn/open-http2/
题外话:】
2.启动脚本:
touch /etc/init.d/nginx
vim /etc/init.d/nginx
加入代码,wq保存
#!/bin/bash
# nginx Startup script for the Nginx HTTP Server
# it is v.0.0.2 version.
# chkconfig: - 85 15
# description: Nginx is a high-performance web and proxy server.
# It has a lot of features, but it's not for everyone.
# processname: nginx
# pidfile: /var/run/nginx.pid
# config: /usr/local/nginx/conf/nginx.conf
nginxd=/usr/local/nginx/sbin/nginx
nginx_config=/usr/local/nginx/conf/nginx.conf
nginx_pid=/var/run/nginx.pid
RETVAL=0
prog="nginx"
# Source function library.
. /etc/rc.d/init.d/functions
# Source networking configuration.
. /etc/sysconfig/network
# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0
[ -x $nginxd ] || exit 0
# Start nginx daemons functions.
start() {
if [ -e $nginx_pid ];then
echo "nginx already running...."
exit 1
fi
echo -n $"Starting $prog: "
daemon $nginxd -c ${nginx_config}
RETVAL=$?
echo
[ $RETVAL = 0 ] && touch /var/lock/subsys/nginx
return $RETVAL
}
# Stop nginx daemons functions.
stop() {
echo -n $"Stopping $prog: "
killproc $nginxd
RETVAL=$?
echo
[ $RETVAL = 0 ] && rm -f /var/lock/subsys/nginx /var/run/nginx.pid
}
# reload nginx service functions.
reload() {
echo -n $"Reloading $prog: "
#kill -HUP `cat ${nginx_pid}`
killproc $nginxd -HUP
RETVAL=$?
echo
}
# See how we were called.
case "$1" in
start)
start
;;
stop)
stop
;;
reload)
reload
;;
restart)
stop
start
;;
status)
status $prog
RETVAL=$?
;;
*)
echo $"Usage: $prog {start|stop|restart|reload|status|help}"
exit 1
esac
exit $RETVAL
3.添加自启动
vim /etc/rc.d/rc.local
添加:
/etc/init.d/nginx start
添加nginx用户:
groupadd nginx
useradd -g nginx nginx
然后设置权限:
chmod 755 /etc/init.d/nginx
4.启动nginx
/etc/init.d/nginx start
到这里就启动完成ngxin,我们需要配置nginx
5.配置nginx
添加文件地址/www/web
mkdir -p /www/web
添加log文件:
mkdir /var/log/nginx
touch /var/log/nginx/error.log
chmod 777 -R /var/log/nginx/error.log
添加nginx 文件access.log和error.log
mkdir /www/web_logs
touch /www/web_logs/access.log
chmod 777 /www/web_logs/access.log
touch /www/web_logs/error.log
chmod 777 /www/web_logs/error.log
nginx的配置如下:
/usr/local/nginx/conf/nginx.conf,代码如下:
user nginx nginx;
worker_processes 4;
error_log /var/log/nginx/error.log warn;
pid /usr/local/nginx/logs/nginx.pid;
worker_rlimit_nofile 65535;
events {
use epoll;
worker_connections 65535;
}
http {
include mime.types;
default_type application/octet-stream;
server_names_hash_bucket_size 128;
client_header_buffer_size 32k;
large_client_header_buffers 4 32k;
client_max_body_size 8m;
# limit_conn_zone $binary_remote_addr zone=one:32k;
sendfile on;
tcp_nopush on;
keepalive_timeout 120;
tcp_nodelay on;
fastcgi_buffers 8 128k;
fastcgi_connect_timeout 9900s;
fastcgi_send_timeout 9900s;
fastcgi_read_timeout 9900s;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_http_version 1.1;
gzip_comp_level 2;
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;
log_format wwwlogs '$remote_addr - $remote_user [$time_local] $request $status $body_bytes_sent $http_referer $http_user_agent $http_x_forwarded_for';
include conf.d/*.conf;
}
/usr/local/nginx/conf/none.conf,代码如下:
location / {
index index.html index.php; ## Allow a static html file to be shown first
try_files $uri $uri/ @handler; ## If missing pass the URI to Magento's front handler
expires 30d; ## Assume all files are cachable
#rewrite ^/$ /index.php last;
# rewrite ^/(?!index\.php|robots\.txt|static)(.*)$ /index.php/$1 last;
}
## These locations would be hidden by .htaccess normally
location /app/ { deny all; }
location /includes/ { deny all; }
location /lib/ { deny all; }
location /media/downloadable/ { deny all; }
location /pkginfo/ { deny all; }
location /report/config.xml { deny all; }
location /var/ { deny all; }
location /var/email/ {allow all;}
location /var/export/ { ## Allow admins only to view export folder
auth_basic "Restricted"; ## Message shown in login window
auth_basic_user_file htpasswd; ## See /etc/nginx/htpassword
autoindex on;
}
location /. { ## Disable .htaccess and other hidden files
return 404;
}
location @handler { ## Magento uses a common front handler
rewrite / /index.php;
}
location ~ .php/ { ## Forward paths like /js/index.php/x.js to relevant handler
rewrite ^(.*.php)/ $1 last;
}
/usr/local/nginx/conf/conf.d/default.conf 这个文件是网站内容的配置。譬如如下:
server {
listen 1000;
listen 443 ssl;
server_name 192.168.220.100;
root /www/web/datacenter/datacenter_1000/appadmin/web;
server_tokens off;
include none.conf;
index index.php;
access_log /www/web_logs/access.log wwwlogs;
error_log /www/web_logs/error.log notice;
location ~ \.php$ {
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fcgi.conf;
}
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
expires 30d;
}
location ~ .*\.(js|css)?$ {
expires 12h;
}
location ~ /.svn/ {
deny all;
}
}
上面的意思为:
listen 代表监听的端口,线上都是填写80,80是默认端口,我们访问的网站,默认都是80端口
server_name 填写对应的IP,或者域名
root 代表上面访问IP或者域名,网站的根目录
填写完成上面的后,保存,退出。重启nginx
/etc/init.d/nginx restart
6.新建文件:
mkdir -p /www/web/datacenter/datacenter_1000/appadmin/web
touch /www/web/datacenter/datacenter_1000/appadmin/web/index.php
vim /www/web/datacenter/datacenter_1000/appadmin/web/index.php
添加代码
echo phpinfo();
?>
访问配置的nginx的域名或者IP就可以看到页面了。
7. nginx php 隐藏版本号
vi /usr/local/nginx/conf/nginx.conf
#在http{}中加入
server_tokens off;
第二歩:
vi /usr/local/nginx/conf/fastcgi_params
#将里面的
#fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
#修改为:
fastcgi_param SERVER_SOFTWARE nginx;
隐藏PHP版本号
vi php.ini
#找到:
#expose_php = On;
#修改为:
expose_php = Off;
8nginx日志切割
设置日志格式及路径:
全局格式设置 :nginx.conf
log_format wwwlogs '$remote_addr - $remote_user [$time_local] $request $status $body_bytes_sent $http_referer $http_user_agent $http_x_forwarded_for';
access_log /www/web_logs/access.log wwwlogs;
error_log /www/web_logs/error.log notice;
新建文件 /cron/nginx_spilit.sh
#!/bin/bash
log_files_path="/www/web_logs/"
log_files_dir=${log_files_path}$(date -d "yesterday" +"%Y")/$(date -d "yesterday" +"%m")
log_files_name=(access access error error)
nginx_sbin="$/usr.local/nginx/sbin/nginx "
save_days=60
mkdir -p $log_files_dir
log_files_num=${#log_files_name[@]}
for((i=0;i
mv ${log_files_path}${log_files_name[i]}.log ${log_files_dir}/${log_files_name[i]}_$(date -d "yesterday" +"%Y%m%d").log
done
find $log_files_path -mtime +$save_days -exec rm -rf {} \;
$nginx_sbin -s reload
crontab -e
00 00 * * * /bin/bash /cron/nginx_spilit.sh