1. 程式人生 > >Nginx安裝與配置:默認虛擬主機、用戶認證和域名重定向

Nginx安裝與配置:默認虛擬主機、用戶認證和域名重定向

Nginx安裝 虛擬主機 重定向 用戶認證

一、Nginx安裝

1、下載並解壓安裝包

[root@zhulinux-02 ~]# cd /usr/local/src/
[root@zhulinux-02 src]# wget http://nginx.org/download/nginx-1.12.2.tar.gz
[root@zhulinux-02 src]# tar zxf nginx-1.12.2.tar.gz

2、配置編譯選項

[root@zhulinux-02 src]# cd nginx-1.12.2
[root@zhulinux-02 nginx-1.12.2]# ./configure --prefix=/usr/local/nginx

3、編譯和安裝

[root@zhulinux-02 nginx-1.12.2]# make
[root@zhulinux-02 nginx-1.12.2]# make install

4、編寫Nginx啟動腳本並加入系統服務和開機啟動

[root@zhulinux-02 nginx-1.12.2]# vim /etc/init.d/nginx     //加入以下內容

#!/bin/bash
# chkconfig: - 30 21
# description: http service.
# Source Function Library
. /etc/init.d/functions
# Nginx Settings
NGINX_SBIN="/usr/local/nginx/sbin/nginx"
NGINX_CONF="/usr/local/nginx/conf/nginx.conf"
NGINX_PID="/usr/local/nginx/logs/nginx.pid"
RETVAL=0
prog="Nginx"
start() 
{
    echo -n $"Starting $prog: "
    mkdir -p /dev/shm/nginx_temp
    daemon $NGINX_SBIN -c $NGINX_CONF
    RETVAL=$?
    echo
    return $RETVAL
}
stop() 
{
    echo -n $"Stopping $prog: "
    killproc -p $NGINX_PID $NGINX_SBIN -TERM
    rm -rf /dev/shm/nginx_temp
    RETVAL=$?
    echo
    return $RETVAL
}
reload()
{
    echo -n $"Reloading $prog: "
    killproc -p $NGINX_PID $NGINX_SBIN -HUP
    RETVAL=$?
    echo
    return $RETVAL
}
restart()
{
    stop
    start
}
configtest()
{
    $NGINX_SBIN -c $NGINX_CONF -t
    return 0
}
case "$1" in
  start)
        start
        ;;
  stop)
        stop
        ;;
  reload)
        reload
        ;;
  restart)
        restart
        ;;
  configtest)
        configtest
        ;;
  *)
        echo $"Usage: $0 {start|stop|reload|restart|configtest}"
        RETVAL=1
esac
exit $RETVAL

[root@zhulinux-02 nginx-1.12.2]# chmod 755 /etc/init.d/nginx
[root@zhulinux-02 nginx-1.12.2]# chkconfig --add nginx                    //加入系統服務
[root@zhulinux-02 nginx-1.12.2]# chkconfig nginx on                        //開機啟動

4、更改Nginx配置文件

[root@zhulinux-02 nginx-1.12.2]# > /usr/local/nginx/conf/nginx.conf        //重定向符號>,單獨使用時,可以吧一個文本文檔快速清空
[root@zhulinux-02 nginx-1.12.2]# vim /usr/local/nginx/conf/nginx.conf    //寫入以下內容

user nobody nobody;
worker_processes 2;
error_log /usr/local/nginx/logs/nginx_error.log crit;
pid /usr/local/nginx/logs/nginx.pid;
worker_rlimit_nofile 51200;
events
{
    use epoll;
    worker_connections 6000;
}
http
{
    include mime.types;
    default_type application/octet-stream;
    server_names_hash_bucket_size 3526;
    server_names_hash_max_size 4096;
    log_format combined_realip ‘$remote_addr $http_x_forwarded_for [$time_local]‘
    ‘ $host "$request_uri" $status‘
    ‘ "$http_referer" "$http_user_agent"‘;
    sendfile on;
    tcp_nopush on;
    keepalive_timeout 30;
    client_header_timeout 3m;
    client_body_timeout 3m;
    send_timeout 3m;
    connection_pool_size 256;
    client_header_buffer_size 1k;
    large_client_header_buffers 8 4k;
    request_pool_size 4k;
    output_buffers 4 32k;
    postpone_output 1460;
    client_max_body_size 10m;
    client_body_buffer_size 256k;
    client_body_temp_path /usr/local/nginx/client_body_temp;
    proxy_temp_path /usr/local/nginx/proxy_temp;
    fastcgi_temp_path /usr/local/nginx/fastcgi_temp;
    fastcgi_intercept_errors on;
    tcp_nodelay on;
    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 8k;
    gzip_comp_level 5;
    gzip_http_version 1.1;
    gzip_types text/plain application/x-javascript text/css text/htm 
    application/xml;
    server
    {
        listen 80;
        server_name localhost;
        index index.html index.htm index.php;
        root /usr/local/nginx/html;
        location ~ \.php$ 
        {
            include fastcgi_params;
            fastcgi_pass unix:/tmp/php-fcgi.sock;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME /usr/local/nginx/html$fastcgi_script_name;
        }    
    }
}

[root@zhulinux-02 nginx-1.12.2]# service nginx start   //啟動nginx
[root@zhulinux-02 nginx-1.12.2]# ps aux |grep nginx
root      14119  0.0  0.0  20500   628 ?        Ss   14:54   0:00 nginx: master process /usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf
nobody    14120  0.0  0.1  22944  3212 ?        S    14:54   0:00 nginx: worker process
nobody    14121  0.0  0.1  22944  3212 ?        S    14:54   0:00 nginx: worker process
root      14123  0.0  0.0 112680   968 pts/0    R+   14:54   0:00 grep --color=auto nginx

6、測試是否正確解析PHP

[root@zhulinux-02 ~]# vim /usr/local/nginx/html/test.php   //寫入以下內容

<?php
echo "This is a test php page!";
?>

[root@zhulinux-02 ~]# curl localhost/test.php
This is a test php page![root@zhulinux-02 ~]#       //出現這個說明解析正常

二、Nginx默認虛擬主機

在Nginx中也有默認虛擬主機,跟httpd類似,第一個被Nginx加載的虛擬主機就是默認主機,但和httpd不相同的地方是,它還有一個配置用來標記默認虛擬主機,也就是說,如果沒有這個標記,第一個虛擬主機為默認虛擬主機。

1、修改主配置文件

[root@zhulinux-02 ~]# vim /usr/local/nginx/conf/nginx.conf       //修改為以下內容

#加入這行,意思是/usr/local/nginx/conf/vhost/下面所有以.conf結尾的都會加載
        include vhost/*.conf;
#這裏方便實驗先註釋掉server的內容
#    server
#    {
#        listen 80;
#        server_name localhost;
#        index index.html index.htm index.php;
#        root /usr/local/nginx/html;
#        location ~ \.php$ 
#        {
#            include fastcgi_params;
#            fastcgi_pass unix:/tmp/php-fcgi.sock;
#            fastcgi_index index.php;
#            fastcgi_param SCRIPT_FILENAME /usr/local/nginx/html$fastcgi_script_name;
#        }    
#    }   
}  

2、創建vhost目錄及配置文件

[root@zhulinux-02 ~]# mkdir /usr/local/nginx/conf/vhost
[root@zhulinux-02 ~]# cd /usr/local/nginx/conf/vhost
[root@zhulinux-02 vhost]# vim zlinux.conf        //寫入以下內容

server
{
   listen 80 default_server;   //有這個標記的就是默認虛擬主機
   server_name zlinux.com;
   index index.html index.htm index.php;
   root /data/wwwroot/default;
}

[root@zhulinux-02 vhost]# mkdir /data/wwwroot
[root@zhulinux-02 vhost]# mkdir /data/wwwroot/default
[root@zhulinux-02 vhost]# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@zhulinux-02 vhost]# /usr/local/nginx/sbin/nginx -s reload       //重新加載配置文件

[root@zhulinux-02 vhost]# echo "這是默認主機" > /data/wwwroot/default/index.html
[root@zhulinux-02 vhost]# curl -x127.0.0.1:80 zlinux.com
這是默認主機
[root@zhulinux-02 vhost]# curl -x127.0.0.1:80 11223.com     //訪問一個沒有定義的網址,一會訪問到zlinux.com
這是默認主機

三、用戶認證

1、創建一個新的虛擬主機

[root@zhulinux-02 vhost]# vim linuxtest.conf

server
{
   listen 80;                  
   server_name linuxtest.com;
   index index.html index.htm index.php;
   root /data/wwwroot/linuxxtest;

   location /
     {
       auth_basic         "Auth";
       auth_basic_user_file /usr/local/nginx/conf/htpasswd;
     }
}

[root@zhulinux-02 vhost]# mkdir /data/wwwroot/linuxtest
[root@zhulinux-02 vhost]# yum install -y httpd     //安裝httpd,也可以用之前編譯安裝的apache2
[root@zhulinux-02 vhost]# htpasswd -c /usr/local/nginx/conf/htpasswd zlinux     //-c選項第一創建用戶時使用,否則回清空用戶
New password: 
Re-type new password: 
Adding password for user zlinux
[root@zhulinux-02 vhost]# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@zhulinux-02 vhost]# /usr/local/nginx/sbin/nginx -s reload

兩句核心,auth_basic打開認證,auth_basic_user_file指定用戶密碼文件。生成密碼工具需要借助apache的htpasswd。Nginx不自帶這個工具。

2、驗證

[root@zhulinux-02 vhost]# curl -x127.0.0.1:80 linuxtest.com -I
HTTP/1.1 401 Unauthorized
Server: nginx/1.12.2
Date: Tue, 13 Mar 2018 07:38:42 GMT
Content-Type: text/html
Content-Length: 195
Connection: keep-alive
WWW-Authenticate: Basic realm="Auth"
//401狀態碼,說明訪問需要驗證
[root@zhulinux-02 vhost]# curl -x127.0.0.1:80 -u zlinux:123456 linuxtest.com      //加上用戶名密碼就能訪問
這是用戶認證測試主機

四、域名重定向

Nginx的域名重定向與httpd類似。

[root@zhulinux-02 vhost]# vim moved.conf

server
{
    listen 80;
    #nginx可以配置多個主機名,apache只能使用ServerAlias來指定別名 
    server_name testmoved.com testmoved2.com testmoved3.com;
    index index.html index.htm index.php;
    root /data/wwwroot/testmoved;
    #判斷host是否為test.com
    if ($host != ‘test.com‘) 
    {   
    rewrite ^/(.*)$ http://test.com/$1 permanent;
    }
}

[root@zhulinux-02 vhost]# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
[root@zhulinux-02 vhost]# /usr/local/nginx/sbin/nginx -s reload
[root@zhulinux-02 vhost]# mkdir /data/wwwroot/testmoved
[root@zhulinux-02 vhost]# echo "重新定向測試成功" > /data/wwwroot/testmoved/index.html
[root@zhulinux-02 vhost]# curl -x127.0.0.1:80 testmoved.com/
重新定向測試成功
[root@zhulinux-02 vhost]# curl -x127.0.0.1:80 testmoved2.com/ -I
HTTP/1.1 301 Moved Permanently
Server: nginx/1.12.2
Date: Tue, 13 Mar 2018 08:07:21 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: http://testmoved.com/

Nginx安裝與配置:默認虛擬主機、用戶認證和域名重定向