centos安裝配置nginx，ssl生產和配置教程

時間 2019-11-18

標籤 centos 安裝配置 nginx ssl 生產教程欄目 CentOS 简体版

原文原文鏈接

【一】nginx安裝
nginx安裝帶ssl擴展：
cd /usr/local/src #進入用戶目錄
wget http://nginx.org/download/nginx-1.15.0.tar.gz #下載最新版本nginx
tar -zxvf nginx-1.15.0.tar.gz #解壓
cd nginx-1.15.0 #進入目錄
./configure --prefix=/opt/nginx --with-http_stub_status_module --with-http_ssl_module --with-pcre --with-http_realip_module --with-http_image_filter_module #檢測
說明--prefix 指定安裝目錄
make #編譯
make install #安裝
安裝服務實現自啓動nginx

#vim /lib/systemd/system/nginx.service
[Unit]
Description=nginx
After=network.target
[Service]
Type=forking
ExecStart=/opt/nginx/sbin/nginx
ExecReload=/opt/nginx/sbin/nginx -s reload
ExecStop=/opt/nginx/sbin/nginx -s stop
PrivateTmp=true
[Install]

WantedBy=multi-user.target
#chmod 754 /lib/systemd/system/nginx.service
#systemctl start nginx.service
#systemctl enable nginx.service

經常使用命令：啓動nginx服務
　　/opt/nginx/sbin/nginx
經常使用命令：平滑重啓nginx
　　/opt/nginx/sbin/nginx -s reloadvim

【二】nginx配置ssl
cd / #找到根目錄
find -name nginx.conf #查找nginx.conf的配置文件
vi /opt/nginx/conf/nginx.confsession

upstream hello{
server 127.0.0.1:3000;
}
server {
listen 80;
server_name ssl.22.cn;
rewrite ^(.*)$ https://$host$1 permanent; #http強制跳轉https
#charset koi8-r;

#access_log logs/host.access.log main;

location / {
proxy_pass    http://hello; #代理    
}
}
# HTTPS server
server {
listen 443 ssl;
server_name ssl.22.cn;
ssl_certificate key/ssl.22.cn_ssl.crt; #證書
ssl_certificate_key key/ssl.22.cn_ssl.key; #私鑰
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://hello;
}
}