nginx https配置手冊

root 用戶

1.yum install nginx

報錯1:

Error: Package: nginx-1.10.3-1.el6.ngx.x86_64 (nginx)
Requires: libpcre.so.0()(64bit)

解決辦法1:(6改為7)
 vi /etc/yum.repos.d/nginx.repo

如下:
name=nginx repo
baseurl=http://nginx.org/packages/centos/7/$basearch/
gpgcheck=0
enabled=1

報錯2:

yum 無nginx

解決方法2:

更新yum

yum update
sudo rpm -Uvh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm

重新安裝

yum -y install nginx

2.whereis nginx 查看 nginx相關文件地址

nginx: /usr/sbin/nginx /usr/lib64/nginx /etc/nginx /usr/share/nginx /usr/share/man/man8/nginx.8.gz
(1) Nginx配置路徑:/etc/nginx/
(2) PID目錄:/var/run/nginx.pid
(3) 錯誤日志:/var/log/nginx/error.log
(4) 訪問日志:/var/log/nginx/access.log
(5) 默認站點目錄:/usr/share/nginx/html

訪問127.0.0.1:80 能夠成功訪問到nginx服務器(默認端口80)

3.配置

前端html 目錄 /usr/share/nginx/html

將前臺代碼放在該目錄下

配置文件目錄 /etc/nginx

conf.d 文件夾下的default.conf文件
修改端口:

listen       443;
server_name  127.0.0.1;
配置后端接口地址:
location /mine {
proxy_pass  http://192.168.11.12:30000/;
proxy_http_version 1.1;
proxy_redirect    off;
proxy_set_header  X-Forwarded-For  $proxy_add_x_forwarded_for;
proxy_set_header  X-Real-IP  $remote_addr;
proxy_set_header  Host $http_host;
proxy_buffering   off;

proxy_connect_timeout 3s;
proxy_read_timeout 12s;
proxy_send_timeout 3s;
}
將公鑰、私鑰copy到新建的/etc/nginx/cert目錄下,添加配置
ssl on;
ssl_certificate   cert/214903846820743.pem;
ssl_certificate_key  cert/214903846820743.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;

注:公私鑰路徑要能訪問,若有權限問題,執行chmod命令設置文件夾權限

http重定向到https
if ($host ~* "^mine.longforcloud.com$") {
   rewrite ^/(.*)$ https://mine.longforcloud.com/ permanent;
}
刷新不會404
location / {
        root   /usr/share/nginx/html/dist;
        index  index.html index.htm;
        try_files $uri $uri/ /index.html;
}

4.linux命令

關閉防火墻
firewall-cmd --zone=public --add-port=48888/tcp --permanent //關閉端口48888防火墻
firewall-cmd --reload //重啟防火墻
firewall-cmd --list-ports //查看關閉端口
nginx
cd  /usr/sbin/
./nginx -t //啟動
./nginx -s reload //重啟
ps -ef|grep nginx //看端口 
kill -9 “port”(master端口) //殺進程 
權限設置
chmod -R 777 /usr/share/nginx/html/

注:若出現報錯,查看/var/log/nginx/error.log 下報錯

5.本地配置hosts

192.168.11.202 mine.longforcloud.com

訪問https://mine.longforcloud.com

最后編輯于
?著作權歸作者所有,轉載或內容合作請聯系作者
平臺聲明:文章內容(如有圖片或視頻亦包括在內)由作者上傳并發布,文章內容僅代表作者本人觀點,簡書系信息發布平臺,僅提供信息存儲服務。

推薦閱讀更多精彩內容