Nginx配置文件nginx.conf文件配置http,https请求

偏执的太偏执、 2021-08-11 17:28 642阅读 0赞

（一）nginx.conf文件配置示例：  
\#user  nobody;  
worker\_processes  1;

\#error\_log  logs/error.log;  
\#error\_log  logs/error.log  notice;  
\#error\_log  logs/access.log  info;

\#pid        logs/nginx.pid;

events \{  
    worker\_connections  1024;  
\}

http \{  
    include       mime.types;  
    default\_type  application/octet-stream;

\#log\_format  main  '$remote\_addr - $remote\_user \[$time\_local\] "$request" '  
    \#                  '$status $body\_bytes\_sent "$http\_referer" '  
    \#                  '"$http\_user\_agent" "$http\_x\_forwarded\_for"';

sendfile        on;  
    log\_format  elkjson  '\{ "@timestamp": "$time\_iso8601", '  
                                '"remote\_addr": "$remote\_addr", '  
                                '"remote\_user": "$remote\_user", '  
                                '"body\_bytes\_sent": "$body\_bytes\_sent", '  
                                '"request\_time": "$request\_time", '  
                                '"api\_key": "$http\_api\_key", '  
                                '"status": "$status", '  
                                '"request": "$request", '  
                                '"upsteam\_re\_time": "$upstream\_response\_time", '  
                                '"request\_method": "$request\_method", '  
                                '"http\_referrer": "$http\_referer", '  
                                '"domain":"$server\_name", '  
                                '"body\_bytes\_sent": "$body\_bytes\_sent", '  
                                '"upstream\_addr": "$upstream\_addr", '   
                                '"http\_x\_forwarded\_for": "$http\_x\_forwarded\_for", '  
                                '"http\_user\_agent": "$http\_user\_agent" \}';

access\_log  logs/access.log  elkjson;  
    \#tcp\_nopush     on;

\#keepalive\_timeout  0;  
    keepalive\_timeout  65;

\# 配置服务端地址  
    upstream grpclbs \{  
         server 179.19.3.4:8889 weight=5;  
         server 179.19.3.3:8889 weight=5;  
    \}  
     
    \#gzip  on;

\# server \{  
      \#  listen       80;  
      \#  server\_name  localhost;

\#charset koi8-r;

\#access\_log  logs/host.access.log  main;

\# location / \{  
        \#    root   html;  
       \#     index  index.html index.htm;

\#error\_page  404              /404.html;

\# redirect server error pages to the static page /50x.html  
        \#

\# proxy the PHP scripts to Apache listening on 127.0.0.1:80  
        \#  
        \#location ~ \\.php$ \{  
        \#    proxy\_pass   http://127.0.0.1;  
        \#\}

\# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000  
        \#  
        \#location ~ \\.php$ \{  
        \#    root           html;  
        \#    fastcgi\_pass   127.0.0.1:9000;  
        \#    fastcgi\_index  index.php;  
        \#    fastcgi\_param  SCRIPT\_FILENAME  /scripts$fastcgi\_script\_name;  
        \#    include        fastcgi\_params;  
        \#\}

\# deny access to .htaccess files, if Apache's document root  
        \# concurs with nginx's one  
        \#  
        \#location ~ /\\.ht \{  
        \#    deny  all;  
        \#\}

server \{  
           listen 4567 http2;  
           location / \{  
              grpc\_pass grpc://grpclbs;  
           \}  
    \}  
    \#http请求的方式；监听本机端口8082，代理到172.19.3.71机器上的8084端口上去；【172.19.3.71机器上的nginx的listen为8084，然后location中对应程序的端口】  
    server \{  
        listen       8082;  
        server\_name  localhost;  
        \#include proxy\_params表示获包含外部配置proxy\_params，记录之前经过机器的IP地址等信息，详情请看外面proxy\_params文件】  
        include  proxy\_params;  
        charset utf-8;  
        location / \{  
            proxy\_pass http://179.20.3.71:8084;  
                   \}  
    \}  
    \#这个是https请求的方式  
    server \{  
        listen       4433;  
        include  proxy\_params;  
        server\_name  localhost;  
        ssl on;  
        ssl\_certificate     server.crt;  
        ssl\_certificate\_key  server.key;  
        ssl\_session\_timeout  5m;  
        ssl\_protocols  TLSv1 TLSv1.1 TLSv1.2;  
        ssl\_ciphers 'ECDHE-S128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!ED-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';  
        ssl\_prefer\_server\_ciphers   on;  
        \#ssl\_dhparam      dhparams.pem;  
        location / \{  
            include     proxy\_params;  
            proxy\_pass http://179.20.3.71:8084;  
        \}  
    \}

\# another virtual host using mix of IP-, name-, and port-based configuration  
    \#  
    \#server \{  
    \#    listen       8000;  
    \#    listen       somename:8080;  
    \#    server\_name  somename  alias  another.alias;

\#    location / \{  
    \#        root   html;  
    \#        index  index.html index.htm;  
    \#    \}  
    \#\}

\# HTTPS server  
    \#  
    \#server \{  
    \#    listen       443 ssl;  
    \#    server\_name  localhost;

\#    ssl\_certificate      cert.pem;  
    \#    ssl\_certificate\_key  cert.key;

\#    ssl\_session\_cache    shared:SSL:1m;  
    \#    ssl\_session\_timeout  5m;

\#    ssl\_ciphers  HIGH:!aNULL:!MD5;  
    \#    ssl\_prefer\_server\_ciphers  on;

\#    location / \{  
    \#        root   html;  
    \#        index  index.html index.htm;  
    \#    \}  
    \#\}

（二）proxy\_params配置文件示列：

proxy\_redirect off;

\#经过的ip地址信息，保存在对应的请求头中  
proxy\_set\_header Host $http\_host;  
proxy\_set\_header X-Real-IP $remote\_addr;  
proxy\_set\_header X-Scheme $scheme;  
proxy\_set\_header X-Forwarded-For $proxy\_add\_x\_forwarded\_for;