配置nginx服务器,香港云主机ucloud,俄罗斯VPS服务器配置比较,云主机200m,云主机弹性伸缩

🗣 Wd提问: 配置nginx服务器

🤖 Ai回答:
Nginx 服务器配置指南

安装 Nginx

Ubuntu/Debian
bash
sudo apt update
sudo apt install nginx

CentOS/RHEL
bash
sudo yum install epel-release
sudo yum install nginx

启动服务
bash
sudo systemctl start nginx
sudo systemctl enable nginx

基本配置文件结构

Nginx 的主要配置文件位于：
`/etc/nginx/nginx.conf` (主配置文件)
`/etc/nginx/conf.d/` (附加配置文件目录)
`/etc/nginx/sites-available/` (可用站点配置)
`/etc/nginx/sites-enabled/` (已启用站点配置)

基本配置示例

静态网站配置
nginx
server {
listen 80;
server_name 65.hk www.65.hk;

root /var/www/65.hk;
index index.html index.htm;

location / {
try_files $uri $uri/ =404;
}
}

PHP 支持配置
nginx
server {
listen 80;
server_name 65.hk;
root /var/www/65.hk;

index index.php index.html index.htm;

location / {
try_files $uri $uri/ /index.php?$query_string;
}

location ~ \.php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
}
}

反向代理配置

nginx
server {
listen 80;
server_name api.65.hk;

location / {
proxy_pass http://localhost:3000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}

SSL/TLS 配置 (HTTPS)

生成自签名证书 (测试用)
bash
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
-keyout /etc/ssl/private/nginx-selfsigned.key \
-out /etc/ssl/certs/nginx-selfsigned.crt

HTTPS 服务器配置
nginx
server {
listen 443 ssl;
server_name 65.hk;

ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;

ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;

root /var/www/65.hk;
index index.html;
}

HTTP 重定向到 HTTPS
nginx
server {
listen 80;
server_name 65.hk;
return 301 https://$host$request_uri;
}

负载均衡配置

nginx
upstream backend {
server backend1.65.hk;
server backend2.65.hk;
server backend3.65.hk;
}

server {
listen 80;
server_name 65.hk;

location / {
proxy_pass http://backend;
}
}

常用命令

测试配置：`sudo nginx -t`
重载配置：`sudo systemctl reload nginx`
停止服务：`sudo systemctl stop nginx`
查看状态：`sudo systemctl status nginx`
查看访问日志：`tail -f /var/log/nginx/access.log`
查看错误日志：`tail -f /var/log/nginx/error.log`

安全配置建议

1、隐藏 Nginx 版本信息：
nginx
server_tokens off;

2、限制请求大小：
nginx
client_max_body_size 10M;

3、启用安全头部：
nginx
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options SAMEORIGIN;
add_header X-XSS-Protection 1; mode=block;

4、禁用不需要的 HTTP 方法：
nginx
location / {
...
if ($request_method !~ ^(GET|POST|HEAD)$ ) {
return 444;
}
}

性能优化

1、启用 Gzip 压缩：
nginx
gzip on;
gzip_types text/plain text/css application/json application/javascript;

2、调整工作进程：
nginx
worker_processes auto;
worker_connections 1024;

3、启用缓存：
nginx
proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=my_cache:10m inactive=60m;

完整示例配置

nginx
user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
worker_connections 1024;
}

http {
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;

include /etc/nginx/mime.types;
default_type application/octet-stream;

ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;

access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;

gzip on;
gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_types text/plain text/css application/json application/javascript;

include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
}

以上是一个基本的 Nginx 配置指南。实际配置应根据具体需求进行调整。建议在修改配置前备份原始文件，并在每次修改后测试配置语法是否正确。

Ai作答

📣 商家广告：