Nginx安裝配置,支援http以及https
阿新 • • 發佈:2019-01-03
一、Nginx安裝
如果yum安裝失敗,可從這個地方***下載相關rpm包,直接執行install.sh安裝即可
二、配置http
修改配置檔案nginx.conf,安裝上邊的步驟安裝,應該是在/usr/local/webserver/nginx/conf這個目錄下
修改配置檔案第一個server的location值如下,並在上邊加入upstream backend,這樣就可以配置多個webserver
upstream backend { server 192.168.1.231:10001; server 192.168.1.232:10001; server 192.168.1.233:10001; server 192.168.1.234:10001; server 192.168.1.235:10001; } location / { proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://backend; }
三、配置https
1.配置https,首先要生成SSL證書
# 1、首先,在安裝目錄下新建ssl資料夾,進入該目錄,例如: mkdir /usr/local/webserver/nginx/ssl cd /usr/local/webserver/nginx/ssl # 2、建立伺服器私鑰,命令會讓你輸入一個口令: openssl genrsa -des3 -out server.key 1024 # 3、建立簽名請求的證書(CSR): openssl req -new -key server.key -out server.csr # 4、在載入SSL支援的Nginx並使用上述私鑰時除去必須的口令: cp server.key server.key.org openssl rsa -in server.key.org -out server.key # 5、最後標記證書使用上述私鑰和CSR: openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
2.修改nginx.conf配置檔案
將配置檔案最後邊的HTTPS server的註釋放開,修改值如下,然後在前邊加入upstream backend內容
upstream backend { server 192.168.1.231:10001; server 192.168.1.232:10001; server 192.168.1.233:10001; server 192.168.1.234:10001; server 192.168.1.235:10001; } # HTTPS server # server { listen 443 ssl; server_name localhost; ssl_certificate /usr/local/webserver/nginx/ssl/server.crt; ssl_certificate_key /usr/local/webserver/nginx/ssl/server.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass https://backend; } }
四、配置完成後啟動server
# 進入目錄/usr/local/webserver/nginx/sbin
cd /usr/local/webserver/nginx/sbin
# 啟動
./nginx -t -c /usr/local/webserver/nginx/conf/nginx.conf
# 其他命令
/usr/local/webserver/nginx/sbin/nginx -s reload # 重新載入配置檔案
/usr/local/webserver/nginx/sbin/nginx -s reopen # 重啟 Nginx
/usr/local/webserver/nginx/sbin/nginx -s stop # 停止 Nginx