伺服器配置nginx.conf檔案
阿新 • • 發佈：2021-07-26
#user root; worker_processes 1; #error_log logs/error.log; #error_log logs/error.log notice; #error_log logs/error.log info; #pid logs/nginx.pid; events { worker_connections 1024; } http { include mime.types; default_type application/octet-stream; #log_format main'$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout0; keepalive_timeout 65;
#經過 NGINX 載入js大檔案載入不全，報206 (Partial Content)錯誤
proxy_buffer_size 128k; proxy_buffers 32 128k; proxy_busy_buffers_size 128k; # 涓婇潰涓や釜寮€鍚熀鏈氨鑳借窇璧蜂簡錛屼笅闈㈢殑鎰挎剰鎶樿吘灝變簡瑙ｄ竴涓? gzip on; #璇ユ寚浠ょ敤浜庡紑鍚垨鍏抽棴gzip妯″潡(on/off) gzip_buffers 4 16k; #璁劇疆緋葷粺鑾峰彇鍑犱釜鍗曚綅鐨勭紦瀛樼敤浜庡瓨鍌╣zip鐨勫帇緙╃粨鏋滄暟鎹祦銆?6 8k浠ｈ〃浠?k涓哄崟浣嶏紝瀹夎鍘熷鏁版嵁澶у皬浠?k涓哄崟浣嶇殑16鍊嶇敵璇峰唴瀛? gzip_comp_level 6; #gzip鍘嬬緝姣旓紝鏁板€艱寖鍥存槸1-9錛?鍘嬬緝姣旀渶灝忎絾澶勭悊閫熷害鏈€蹇紝9鍘嬬緝姣旀渶澶т絾澶勭悊閫熷害鏈€鎱? gzip_http_version 1.1; #璇嗗埆http鐨勫崗璁増鏈? gzip_min_length 256; #璁劇疆鍏佽鍘嬬緝鐨勯〉闈㈡渶灝忓瓧鑺傛暟錛岄〉闈㈠瓧鑺傛暟浠巋eader澶村緱content-length涓繘琛岃幏鍙栥€傞粯璁ゅ€兼槸0錛屼笉綆￠〉闈㈠澶ч兘鍘嬬緝銆傝繖閲屾垜璁劇疆浜嗕負256 gzip_proxied any; #gzip_static on; #榪欓噷璁劇疆鏃犺header澶存槸鎬庝箞鏍鳳紝閮芥槸鏃犳潯浠跺惎鐢ㄥ帇緙? gzip_vary on; #鍦╤ttp header涓坊鍔燰ary: Accept-Encoding ,緇欎唬鐞嗘湇鍔″櫒鐢ㄧ殑 gzip_types text/xml application/xml application/atom+xml application/rss+xml application/xhtml+xml image/svg+xml text/javascript application/javascript application/x-javascript text/x-json application/json application/x-web-app-manifest+json text/css text/plain text/x-component font/opentype font/ttf application/x-font-ttf application/vnd.ms-fontobject image/x-icon; #榪涜鍘嬬緝鐨勬枃浠剁被鍨?榪欓噷鐗瑰埆娣誨姞浜嗗瀛椾綋鐨勬枃浠剁被鍨? gzip_disable "MSIE [1-6]\.(?!.*SV1)"; proxy_temp_path /usr/local/nginx/proxy_temp_path; proxy_cache_path /usr/local/nginx/proxy_cache_path levels=1:2 keys_zone=cache_one:500m inactive=1d max_size=30g; fastcgi_connect_timeout 3000; fastcgi_send_timeout 3000; fastcgi_read_timeout 3000; fastcgi_buffer_size 256k; fastcgi_buffers 8 256k; fastcgi_busy_buffers_size 256k; fastcgi_temp_file_write_size 256k; fastcgi_intercept_errors on; client_header_timeout 600s; client_body_timeout 600s; client_max_body_size 100m; client_body_buffer_size 256k; server { listen 443 ssl; server_name app.sourcingbuy.com; ssl_certificate cert/4219590_app.sourcingbuy.com.pem; ssl_certificate_key cert/4219590_app.sourcingbuy.com.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_prefer_server_ciphers on; #charset koi8-r; #access_log logs/host.access.log main; # location / { # root html; # index index.html index.htm; # } location / { root /var/www/html; try_files $uri $uri/ /index.html; index index.html; #璁劇疆 expires錛岃緗紦瀛? autoindex on; expires 7d; # 緙撳瓨 7 澶? } location /image/ { proxy_pass http://app.sourcingbuy.com:83/pandaadmin/image/; } location /paypal/pay/purchase { proxy_pass http://app.sourcingbuy.com:81/purchase/pay/paypal/success; } location /paypal/pay/parcel/order { proxy_pass http://app.sourcingbuy.com:81/parcel/order/pay/paypal/success; } location /paypal/pay/recharge { proxy_pass http://app.sourcingbuy.com:81/recharge/paypal/success; } location /paypal/pay/failed { proxy_pass http://app.sourcingbuy.com:81/paypal/pay/failed; } location /api/ { proxy_pass http://app.sourcingbuy.com:81; rewrite ^/api/(.*)$ /$1 break; include uwsgi_params; add_header Access-Control-Allow-Origin *; add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS'; add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token'; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Connection close; add_header X-Xss-Protection 1; add_header X-Content-Type-Options nosniff; add_header X-Frame-Options DENY; proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504; proxy_max_temp_file_size 0; proxy_connect_timeout 90; proxy_send_timeout 90; proxy_read_timeout 90; proxy_buffer_size 4k; proxy_buffers 4 32k; proxy_busy_buffers_size 64k; proxy_temp_file_write_size 64k; } #error_page 404 /404.html; # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root html; } # proxy the PHP scripts to Apache listening on 127.0.0.1:80 # #location ~ \.php$ { # proxy_pass http://127.0.0.1; #} # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 # #location ~ \.php$ { # root html; # fastcgi_pass 127.0.0.1:9000; # fastcgi_index index.php; # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; # include fastcgi_params; #} # deny access to .htaccess files, if Apache's document root # concurs with nginx's one # #location ~ /\.ht { # deny all; #} } # server { # listen 443 ssl; # server_name www.sourcingbuy.com sourcingbuy.com; # ssl_certificate cert/4219600_sourcingbuy.com.pem; # ssl_certificate_key cert/4219600_sourcingbuy.com.key; # ssl_session_timeout 5m; # ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; # ssl_prefer_server_ciphers on; # location / { # root /var/www/html2; # try_files $uri $uri/ /index.html; # index index.html; # #璁劇疆 expires錛岃緗紦瀛? # autoindex on; # expires 7d; # 緙撳瓨 7 澶? # } # location /api/ { # proxy_pass http://app.sourcingbuy.com:83; # rewrite ^/api/(.*)$ /$1 break; # include uwsgi_params; # add_header Access-Control-Allow-Origin *; # add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS'; # add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,token'; # proxy_redirect off; # proxy_set_header Host $host; # proxy_set_header X-Real-IP $remote_addr; # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # proxy_set_header Connection close; # add_header X-Xss-Protection 1; # add_header X-Content-Type-Options nosniff; # add_header X-Frame-Options DENY; # proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504; # proxy_max_temp_file_size 0; # proxy_connect_timeout 90; # proxy_send_timeout 90; # proxy_read_timeout 90; # proxy_buffer_size 4k; # proxy_buffers 4 32k; # proxy_busy_buffers_size 64k; # proxy_temp_file_write_size 64k; # } # } server { listen 443 ssl; server_name www.sourcingbuy.com sourcingbuy.com; ssl_certificate cert/4219600_sourcingbuy.com.pem; ssl_certificate_key cert/4219600_sourcingbuy.com.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_prefer_server_ciphers on; gzip on; gzip_types text/plain application/xml text/css application/javascript; gzip_min_length 1000; location / { # expires $expires; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_read_timeout 1m; proxy_connect_timeout 1m; proxy_pass http://127.0.0.1:3000; #鍙嶅悜浠ｇ悊 } } # another virtual host using mix of IP-, name-, and port-based configuration # #server { # listen 8000; # listen somename:8080; # server_name somename alias another.alias; # location / { # root html; # index index.html index.htm; # } #} server { listen 80; server_name app.sourcingbuy.com www.sourcingbuy.com sourcingbuy.com; #rewrite ^/(.*)$ https://${server_name}/$1 permanent; if ($host = 'app.sourcingbuy.com' ) { rewrite ^/(.*)$ https://app.sourcingbuy.com/$1 permanent; } if ($host = 'www.sourcingbuy.com' ) { rewrite ^/(.*)$ https://www.sourcingbuy.com/$1 permanent; } if ($host = 'sourcingbuy.com' ) { rewrite ^/(.*) https://www.sourcingbuy.com/$1 permanent; } } # HTTPS server # #server { # listen 443 ssl; # server_name localhost; # ssl_certificate cert.pem; # ssl_certificate_key cert.key; # ssl_session_cache shared:SSL:1m; # ssl_session_timeout 5m; # ssl_ciphers HIGH:!aNULL:!MD5; # ssl_prefer_server_ciphers on; # location / { # root html; # index index.html index.htm; # } #} include /etc/nginx/vhosts/*; }