nginx常用服务配置

user nginx;
worker_processes ;
worker_cpu_affinity ;
worker_rlimit_nofile ;pid /var/run/nginx.pid;events {
worker_connections ;
use epoll;
multi_accept off;
}http {
include /usr/local/nginx/conf/mime.types;
default_type application/octet-stream; log_format main '$remote_addr --- $remote_user --- [$time_local] --- $request --- '
'"$status" --- $body_bytes_sent --- "$http_referer" --- '
'"$http_user_agent" --- "$http_x_forwarded_for"';
log_format mtr '$remote_addr [$time_local] "$request_uri" '
'$status "$http_referer" '
'"$http_user_agent" "$host"'; sendfile on; keepalive_timeout ;
client_header_timeout ;
client_body_timeout ;
server_tokens off;
tcp_nodelay on; gzip on; include /usr/local/nginx/conf/vhost/*.conf; fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
#fastcgi_buffer_size 16k;
#fastcgi_buffers 16 16k;
#fastcgi_busy_buffers_size 16k;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k; server_names_hash_bucket_size 128;
client_header_buffer_size 2k;
large_client_header_buffers 4 4k;
client_max_body_size 100k;
open_file_cache max=51200 inactive=20s;
open_file_cache_valid 30s;
open_file_cache_min_uses 1;
}

#user nginx;
worker_processes auto;
worker_rlimit_nofile ;events {
use epoll;
worker_connections ;
accept_mutex off;
}http {
server_tokens off;
include /usr/local/nginx/conf/mime.types;
# default_type text/html;
charset UTF-; #log config
log_format main '$remote_addr [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_x_forwarded_for" ' '"$request_time"'; sendfile on;
tcp_nopush on;
tcp_nodelay on; client_header_buffer_size 1024k;
#timeout config
keepalive_timeout ;
client_header_timeout ;
client_body_timeout ;
client_max_body_size 20m;
reset_timedout_connection on;
send_timeout ; #limit_conn_zone $binary_remote_addr zone=addr:5m;
#limit_conn addr ; #gzip config
gzip on;
gzip_disable "msie6";
gzip_proxied any;
gzip_min_length ;
gzip_comp_level ;
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript; open_file_cache max= inactive=600s;
open_file_cache_valid 30s;
open_file_cache_min_uses ;
open_file_cache_errors off; include /usr/local/nginx/vhost/conf/*.conf;
# include /etc/nginx/sites-enabled/*;
}

#!/bin/bash# [ -e $PID ] -e 存在
PROCESS=/usr/local/nginx/sbin/nginx
PID=/var/run/nginx.pid
start(){
if [ -e $PID ];then
echo -e "\033[34m nginx already running... \033[0m"
else
$PROCESS
echo -e "\033[34m ngins start OK \033[0m"
exit
fi
}stop(){
if [ -e $PID ];then
$PROCESS -s stop
echo -e "\033[34m nginx stop OK ... \033[0m"
else
echo -e "\033[34m nginx not running... \033[0m"
fi
}reload(){
if [ -e $PID ];then
$PROCESS -s reload
echo -e "\033[34m nginx is reload ... \033[0m"
else
echo -e "\033[31m nginx not running ... \033[0m"
fi
}configtest(){
$PROCESS -t
}status(){
if [ -e $PID ];then
echo -e "\033[34m nginx already running... \033[0m"
else
echo -e "\033[31m nginx not running ... \033[0m"
fi
}case $ in
start)
start
;; stop)
stop
;;
reload)
reload
;;
configtest)
configtest
;;
status)
status
;;
*)
echo -e $"\033[31m Usage: $prog {start|stop|reload|configtest|status}\033[0m"
;;
esac

server {
listen ;
server_name 127.0.0.1;
#server_name sch5.com.cn; access_log /var/log/nginx/sch5.com.cn_access.log main;
error_log /var/log/nginx/sch5.talkweb.com.cn_error.log; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Real_IP $remote_addr; disable_symlinks off;
location / {
root /opt/wwwroot/;
index index.php index.html index.htm;
} location /nginx_status {
#stub_status on;
allow 127.0.0.1;
deny all;
}
}

server {
listen ;
server_name 127.0.0.1;
#server_name sch5.com.cn; access_log /var/log/nginx/sch5.com.cn_access.log main;
error_log /var/log/nginx/sch5.talkweb.com.cn_error.log; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Real_IP $remote_addr; disable_symlinks off;
location / {
add_header Access-Control-Allow-Origin *;
add_header Access-Control-Allow-Headers "Origin, X-Requested-With, Content-Type, Accept";
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS"; root /opt/wwwroot/;
index index.php index.html index.htm;
} location /nginx_status {
#stub_status on;
allow 127.0.0.1;
deny all;
}
}

server {
listen ;
server_name filer.nad.com;
root /var/www/nad/service/nad_filer;
index index.php index.html index.htm;
try_files $uri $uri/ @rewrite;
location @rewrite {
rewrite ^/(.*)$ /index.php?_url=/$;
}
location ~ \.php {
add_header Access-Control-Allow-Origin *;
add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,lang,access-token';
if ($request_method = 'OPTIONS') {
return ;
} fastcgi_pass 127.0.0.1:;
fastcgi_index /index.php;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}}

server {
listen ;
server_name localhost; access_log /data/log/nginx/myjumpserver_access.log main;
error_log /data/log/nginx/myjumpserver_error.log; location / {
uwsgi_pass 192.168.10.55:;
include uwsgi_params;
}
# django项目文件， MyJumpserver，静态资源这里加载
location /static {
alias /opt/wwwroot/MyJumpserver/static/;
} error_page /50x.html;
location = /50x.html {
root html;
}
}
# 访问localhost: ===>192.168.10.13:（uwsgi服务提供的）

server {
listen ;
server_name localhost; access_log /data/log/nginx/pvzstar_access.log main;
error_log /data/log/nginx/pvzstar_error.log; location / {
uwsgi_pass 192.168.2.155:;
include uwsgi_params;
}
# django项目文件， MyJumpserver，静态资源这里加载
location /static {
alias /usr/local/python3/lib/python3./site-packages/django/contrib/admin/static/;
} # redirect server error pages to the static page /50x.html
error_page /50x.html;
location = /50x.html {
root html;
}
}

server {
listen ;
server_name test.php.com;
#server_name 192.168.2.41; access_log /data/log/nginx/test.php_access.log main; error_log /data/log/nginx/test.php_error.log; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Real_IP $remote_addr; location / {
root /opt/wwwroot/test.php.com.cn/;
index index.php index.html index.htm;
} location /nginx_status {
stub_status on;
allow 127.0.0.1;
deny all;
}
error_page /.html;
location = /.html {
root /usr/share/nginx/html;
} error_page /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
} location ~ .*\.php$ {
fastcgi_pass 127.0.0.1:;
#fastcgi_pass UNIX:/tmp/php-cgi.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /opt/wwwroot/test.php.com.cn$fastcgi_script_name;
include fastcgi_params;
if ( $fastcgi_script_name ~ \..*\/.*php ) {
return ;
}
}
}

#user nobody;
worker_processes ;#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;#pid logs/nginx.pid;events {
worker_connections ;
}http {
include /opt/lnmp_zabbix/nginx/conf/mime.types;
default_type application/octet-stream; #access_log logs/access.log main; sendfile on;
#tcp_nopush on; #keepalive_timeout ;
keepalive_timeout ; #gzip on; server {
listen ;
server_name localhost;
#access_log /opt/lnmp_zabbix/nginx/log/zabbix.log main;
index index.html index.php index.html;
root /opt/wwwroot/zabbix; location / {
try_files $uri $uri/ /index.php?$args;
} location ~ ^(.+.php)(.*)$ {
fastcgi_split_path_info ^(.+.php)(.*)$;
include fastcgi.conf;
fastcgi_pass 127.0.0.1:;
fastcgi_index index.php;
fastcgi_param PATH_INFO $fastcgi_path_info;
}
error_page /50x.html;
location = /50x.html {
root html;
} }}

server {
listen default;
location /nginx_status {
stub_status on;
allow 127.0.0.1;
deny all;
}
location /{
return ;
}
}

user nginx;
worker_processes ;
worker_cpu_affinity ;
worker_rlimit_nofile ;pid /var/run/nginx.pid;events {
worker_connections ;
use epoll;
multi_accept off;
}http {
include /opt/lnmp_zabbix/nginx/conf/mime.types;
default_type application/octet-stream; log_format main '$remote_addr --- $remote_user --- [$time_local] --- $request --- '
'"$status" --- $body_bytes_sent --- "$http_referer" --- '
'"$http_user_agent" --- "$http_x_forwarded_for"';
log_format mtr '$remote_addr [$time_local] "$request_uri" '
'$status "$http_referer" '
'"$http_user_agent" "$host"'; sendfile on; keepalive_timeout ;
client_header_timeout ;
client_body_timeout ;
server_tokens off;
tcp_nodelay on; gzip on; include /opt/lnmp_zabbix/nginx/conf/vhost/*.conf; fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
#fastcgi_buffer_size 16k;
#fastcgi_buffers 16 16k;
#fastcgi_busy_buffers_size 16k;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k; server_names_hash_bucket_size 128;
client_header_buffer_size 2k;
large_client_header_buffers 4 4k;
client_max_body_size 100k;
open_file_cache max=51200 inactive=20s;
open_file_cache_valid 30s;
open_file_cache_min_uses 1;
}stream { upstream cloudsocket {
hash $remote_addr consistent;
# $binary_remote_addr;
server 192.168.0.12:3306 weight=5 max_fails=3 fail_timeout=30s;
}
server {
listen 80;#数据库服务器监听端口
proxy_connect_timeout 10s;
proxy_timeout 300s;#设置客户端和代理服务之间的超时时间，如果5分钟内没操作将自动断开。
proxy_pass cloudsocket;
}
}

server {
listen ;
server_name 110.110.110.110;
charset utf8; location / {
proxy_pass http://192.168.1.222;
}
}

upstream 192.168.1.29 {
server 192.168.1.25:;
}server {
listen ;
server_name 192.168.1.29;
charset utf8; location / {
proxy_pass http://192.168.1.29;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

server {
listen ;
server_name 192.168.2.95;
access_log /opt/lnmp_zabbix/nginx/log/zabbix2.log main;
error_log /opt/lnmp_zabbix/nginx/log/zabbix_error2.log crit;
charset utf8; location / {
allow 192.168.2.5; # 代理服务下，只有这个ip可以去访问 192.168.2.95:
proxy_pass http://192.168.2.90:89;
deny all;
} error_page /50x.html;
location = /50x.html {
root html;
}
}

upstream 192.168.1.29 {
server 192.168.1.25:;
server 192.168.1.26:;
}server {
listen ;
server_name 192.168.1.29;
charset utf8; location / {
proxy_pass http://192.168.1.29;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

upstream 192.168.10.100 {
server 192.168.10.142:; #web01
server 192.168.10.100:; # web28
check interval= rise= fall= timeout= type=http port=;
#check interval= rise= fall= timeout= type=http;
#check_http_send "GET /index.php HTTP/1.1\r\nHost: 10.19.145.144\r\n\r\n";
#check_http_expect_alive http_2xx http_3xx ;
}server {
listen ;
server_name 192.168.10.100;
charset utf8; access_log /data/log/mytestpvz2/cloud.pvz2android.popcap.com.cn_access.log main;
error_log /data/log/mytestpvz2/cloud.pvz2android.popcap.com.cn_error.log; location / {
proxy_pass http://192.168.10.100;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

server {
resolver 192.168.10.1 192.168.2.1; # dns
resolver_timeout 5s; listen ;
server_name 0.0.0.0;
access_log /data/log/nginx/myjumpserver_access.log main;
error_log /data/log/nginx/myjumpserver_error.log;
location / {
proxy_pass $scheme://$host$request_uri;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $Host;
proxy_set_header X-Forwarder-For $Host;
proxy_buffering on;
proxy_max_temp_file_size ;
proxy_cache_valid 10m;
proxy_cache_valid 1h;
proxy_cache_valid any 1m;
# include /data/app/nginx/conf/proxy.conf;
}
}