安裝nginx并進行配置（記錄來源于馬哥linux運維教程 三）

nginx最常見配置
1、woker_connections:
最大并發數目：woker_proces*woker_conections
2、user[epoil]/[rgsig]/[select]/[poil]
//定義事件使用模型，建議讓nginx自動選擇
3、accept_mutex[on|off] 互斥鎖機制，負載均衡鎖
//on啟用時候 讓多個woker輪流的序列化的回應請求
4、lock_tile /PATH/TO/LOCK_FILE;

更多在官方檔案

https://www.nginx.cn/doc/

性能優化參見：

https://www.cnblogs.com/itcomputer/p/6441998.html

最常用的是：
user nignx nginx 用戶
woker_process 行程數目
woker_priority 指明worker行程的nice值,提高優先級，
woker_connections1024；

企業級別配置決議參考

https://blog.csdn.net/weixin_44313519/article/details/91865439

#user  nobody;
worker_processes  2;

#error_log  /home/usr/local/nginx/logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
pid        logs/nginx.pid;


events {
    worker_connections  10240;
}


http {
    client_header_buffer_size 16k;
    large_client_header_buffers 4 16k;

    include       mime.types;
    default_type  application/octet-stream;


    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
        #tcp_nopush     on;
    keepalive_timeout  65;

    upstream admin {
        server 127.0.0.1:8081;
    }

    upstream api {
        server 127.0.0.1:8080;
    }

    upstream wechat {
        server 127.0.0.1:8082;
    }

    upstream www {
        server 127.0.0.1:8083;
    }

    upstream  svn {
        server 10.162.5.36:3690;
    }

    upstream testwechat {
        server 10.162.5.72:8089;
    }

    upstream testapi {
        server 10.162.5.38:8900;
    }
    upstream yanzheng {
        server 127.0.0.1:8084;
    }



    upstream testadmin {
        server 10.162.5.72:8091;
    }


server {
        listen 80;
        server_name localhost;
        charset utf-8;
        root html;
        access_log  logs/sclzsi.log  main;
        }

server {
        listen       80;
        server_name  www.sclzsi.com;

        charset utf-8;

        location / {
                rewrite . http://182.130.246.34:9528/msimsWebM/;
        }

        access_log  logs/sclzsi.log  main;

       }


server {
        listen       80;
        server_name sclzsi.cn;

        charset utf-8;

        location / {
                proxy_pass  http://www;

        }
        access_log  logs/www.log  main;


        }

server {
        listen       80;
        server_name twechat.sclzsi.cn 220.166.104.172;

        charset utf-8;

        location / {
                proxy_pass  http://10.162.5.39:8100;
                proxy_buffer_size 64k;
                proxy_buffers   4 32k;
                proxy_busy_buffers_size 64k;

        }

        location ^~ /vx/ {
                proxy_pass http://10.162.5.39/;
                proxy_buffer_size 64k;
                proxy_buffers   4 32k;
                proxy_busy_buffers_size 64k;
        }

        location ^~ /attachment/ {
                proxy_pass http://10.162.5.39:8201/;
                proxy_buffer_size 64k;
                proxy_buffers   4 32k;
                proxy_busy_buffers_size 64k;

        }

        location ^~ /admin/ {
                proxy_pass http://10.162.5.39:8200/;
                proxy_buffer_size 64k;
                proxy_buffers   4 32k;
                proxy_busy_buffers_size 64k;

        }

        location ^~ /vx-si/ {
                proxy_pass http://10.162.5.37:8020/;
                proxy_buffer_size 64k;
                proxy_buffers   4 32k;
                proxy_busy_buffers_size 64k;

        }
}

#以下屬性中，以ssl開頭的屬性表示與證書配置有關，
server {
        listen 443 ssl;
        #配置HTTPS的默認訪問埠為443，
        #如果未在此處配置HTTPS的默認訪問埠，可能會造成Nginx無法啟動，
        #如果您使用Nginx 1.15.0及以上版本，請使用listen 443 ssl代替listen 443和ssl on，
        server_name xcx.sclzsi.cn; #需要將yourdomain.com替換成證書系結的域名，
        root html;
        index index.html index.htm;
        ssl_certificate cert/cert-file-name-pem.pem;  #需要將cert-file-name.pem替換成已上傳的證書檔案的名稱，
        ssl_certificate_key cert/cert-file-name-key.key; #需要將cert-file-name.key替換成已上傳的證書密鑰檔案的名稱，
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        #表示使用的加密套件的型別，
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #表示使用的TLS協議的型別，
        ssl_prefer_server_ciphers on;
        location / {
                proxy_pass  http://10.162.5.38:8880;
                root html;  #站點目錄，
                index index.html index.htm;
        }
}


server {
        listen       80;
        server_name xcx.sclzsi.cn;
        rewrite ^(.*)$ https://$host$1; #將所有HTTP請求通過rewrite指令重定向到HTTPS，
        charset utf-8;

        location / {
                proxy_pass  http://10.162.5.38:8880;

        }
}
#內網訪問圖片服務器
server {
        listen       80;
        server_name xcx.sclzsi.cn;
        location ~ .*\.(gif|jpg|jpeg|png)$ {
            expires 24h;
            root /www/xcx/;#指定圖片存放路徑
            proxy_store on;
            proxy_store_access user:rw group:rw all:rw;
            proxy_temp_path         /;#代理臨時路徑
            proxy_redirect          off;

            proxy_set_header        Host xcx.sclzsi.cn;
            proxy_set_header        X-Real-IP $remote_addr;
            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for; 
            client_max_body_size    10m;
            client_body_buffer_size 1280k;
            proxy_connect_timeout   900;
            proxy_send_timeout      900;
            proxy_read_timeout      900;
            proxy_buffer_size       40k;
            proxy_buffers           40 320k;
            proxy_busy_buffers_size 640k;
            proxy_temp_file_write_size 640k;
            if ( !-e $request_filename)
            {
                 proxy_pass  http://10.162.5.38:8880;#代理訪問地址
            }
        }

        location / {
            root   html;
            index  index.html index.htm;
        }

        error_page   500 =200 502 503 504  /50x.html;  //以指定的回應碼回應
        location = /50x.html {
            root   html;
        }

}

server {
        listen       80;
        server_name www.sclzsi.cn;

        charset utf-8;
        location /WechatIMG49.jpeg {
                root html;
        }
        location /WechatIMG50.jpeg {
                root html;
        }

        location /logs.tar.gz {
                root html;
        }
        location / {
                proxy_pass  http://www;
        }
        access_log  logs/www.log  main;


        }


server {
        listen       80;
        server_name svn.sclzsi.cn;

        charset utf-8;

        location / {
                proxy_pass  http://svn;
                client_max_body_size  20m;
        }
        access_log  logs/svn.log  main;


        }


server {
        listen       80;
        server_name  admin.sclzsi.cn;

        charset utf-8;

        location / {
                proxy_pass  http://admin;

        }

        access_log  logs/admin.log  main;

       }


server {
        listen       80;
        server_name  api.sclzsi.cn;

        charset utf-8;

        location / {
                proxy_pass  http://api;
        }

        access_log  logs/api.log  main;

       }


server {
        listen       80;
        server_name  wechat.sclzsi.cn;

        charset utf-8;
        location /MP_verify_h7FTZfPnx5k3ebAQ.txt {
                root html;
        }

        location / {
                proxy_pass  http://wechat;
        }

        access_log  logs/wechat.log  main;

       }



server {
        listen       80;
        server_name  www.sclzsi.com;

        charset utf-8;

        location / {
                proxy_pass  http://www;
        }

        access_log  logs/www.log  main;

       }

server {
        listen       80;
        server_name  svn.sclzsi.com;

        charset utf-8;

        location / {
                proxy_pass  http://svn;
                client_max_body_size  20m;
        }

        access_log  logs/svn.log  main;

       }


server {
        listen       80;
        server_name  admin.sclzsi.com;

        charset utf-8;

        location / {
                proxy_pass  http://admin;
        }

        access_log  logs/admin.log  main;

       }

server {
        listen       80;
        server_name  api.sclzsi.com;

        charset utf-8;

        location / {
                proxy_pass  http://api;
        }

        access_log  logs/api.log  main;

       }

server {
        listen       80;
        server_name  wechat.sclzsi.com;

        charset utf-8;

        location / {
                proxy_pass  http://wechat;
        }

        access_log  logs/wechat.log  main;

       }

server {
        listen       80;
        server_name  testwechat.sclzsi.com;

        charset utf-8;

        location / {
                proxy_pass  http://testwechat;
        }

        access_log  logs/testwechat.log  main;

       }

server {
        listen       80;
        server_name  testapi.sclzsi.cn;

        charset utf-8;

        location / {
                proxy_pass  http://testapi;
        }

        access_log  logs/testapi.log  main;

       }

server {
        listen       80;
        server_name  testadmin.sclzsi.com;

        charset utf-8;

        location / {
                proxy_pass  http://testadmin;
        }

        access_log  logs/testadmin.log  main;

       }
server {
        listen       80;
        server_name  yz.sclzsi.cn;

        charset utf-8;

        location / {
                proxy_pass  http://yanzheng;
        }

        access_log  logs/yanzheng.log  main;

       }




}