Nginx源码部署

Nginx源码部署

安装依赖

yum install -y pcre pcre-devel make zlib zlib-devel gcc-c++ libtool  openssl openssl-devel wget gcc tree vim telnet

下载解压

wget http://nginx.org/download/nginx-1.13.12.tar.gz
tar -zxvf nginx-1.13.12.tar.gz

编译安装

cd nginx-1.13.12/
./configure --prefix=/usr/local/nginx --with-http_ssl_module

make && make install

# 启动
[root@localhost ~]# /usr/local/nginx/sbin/nginx
# 停止
[root@localhost ~]# /usr/local/nginx/sbin/nginx -s stop(quit)
# 平滑重启
[root@localhost ~]# /usr/local/nginx/sbin/nginx -s reload

配置模板

[root@VM-0-17-centos ~]# cat xjzyy.xyz.conf
    # HTTPS server

    server {
        #listen       80;
        listen       443 ssl;
        server_name  xjzyy.xyz;
        #ssl on;

        ssl_certificate      /opt/nginx/conf/certs/6835806_xjzyy.xyz.pem;
        ssl_certificate_key  /opt/nginx/conf/certs/6835806_xjzyy.xyz.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        ssl_protocols TLSv1.2 TLSv1.3 ; #启动特定的加密协议
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_prefer_server_ciphers  on; #设置协商加密算法时，优先使用我们服务端的加密套件，而不是客户端浏览器的加密套件
        
	location / {
            proxy_pass http://xx.xx.xx.xx:30000;
            proxy_set_header   Host             $host;
            proxy_set_header   X-Real-IP        $remote_addr;
            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
        }
    }