Nginx配置

发布于:2024-06-22 ⋅ 阅读:(51) ⋅ 点赞:(0)

Nginx服务基础

​ Nginx专为性能优化而开发,其最知名的优点是它的稳定性和低系统资源消耗,以及对HTTP并发连接的高出力能力(单台物理服务器可支持30000~50000个并发请求)。

Nginx与Apche的区别
  • nginx:轻量级,跨平台,轻量化,并发请求(30000-50000)
  • apache:重量级的web服务,并发请求(3000-5000)
LAMP与LNMP区别
  • LAMP–apache+php装在同一个主机
    • php为apache提供了php的解析模块,该模块给了apache,所以,在此环境中,PHP代码是apache来解析的,而本身php,因此环境中没有php进程
  • LNMP–php无法为nginx提供解析模块,nginx不能解析php代码,php的进程来解析php代码。该进程是fpm的进程(9000端口号),由fpm的进程为php代码进行解析—这个方法较fast-cgi

编译安装Nginx

#关闭防火墙以及内核安全机制
[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# setenforce 0
#安装支持软件
[root@localhost ~]# yum -y install pcre-devel zlib-devel gcc* openssl-devel
[root@localhost ~]# useradd -M -s /sbin/nologin nginx
#解压并编译安装Nginx
[root@localhost ~]# tar zxvf nginx-1.12.0.tar.gz 
[root@localhost ~]# useradd -M -s /sbin/nologin nginx
[root@localhost ~]# tar zxvf nginx-1.12.0.tar.gz 
[root@localhost ~]# useradd -M -s /sbin/nologin nginx
[root@localhost ~]# cd nginx-1.12.0
[root@localhost nginx-1.12.0]# ./configure --prefix=/usr/local/nginx --user=nginx --group=nginx --with-http_ssl_module  --with-http_stub_status_module 
[root@localhost nginx-1.12.0]# make && make install
[root@localhost nginx-1.12.0]# ls /usr/local/nginx/
[root@localhost nginx-1.12.0]# ln -s /usr/local/nginx/sbin/nginx /usr/local/sbin/
#更改以下内容
     location /status {
        stub_status on;
        access_log off;
}
[root@localhost nginx]# systemctl restart nginx
[root@localhost nginx]# cd 
[root@localhost ~]# yum -y install httpd-tools
#配置用户登录
[root@localhost ~]# htpasswd -c /usr/local/nginx/passwd.db zhangsan
[root@localhost ~]# chown nginx /usr/local/nginx/passwd.db 
[root@localhost ~]# chmod 400 /usr/local/nginx/passwd.db 
[root@localhost ~]# cd /usr/local/nginx/
[root@localhost nginx]# vim conf/nginx.conf
auth_basic "secret"; #基于密码加密方式 
auth_basic_user_file  /usr/local/nginx/passwd.db; #加密文件路径
[root@localhost nginx]# systemctl restart nginx
#拒绝某一ip访问
[root@localhost nginx]# vim conf/nginx.conf
deny 192.168.10.102 #拒绝
allow all;#允许所有
[root@localhost nginx]# systemctl restart nginx
Nginx虚拟主机

​ 利用虚拟主机,不用为每个要预先的网站提供一台单独的Nginx服务器或单独允许一组Nginx进程,虚拟主机提供了在同一台服务器,同一组Nginx进程上允许多个网站的功能。跟Apache一样,Nginx也可以配置多种类型的虚拟主机,分别是基于IP的虚拟主机、基于域名的虚拟主机、基于端口的虚拟主机。

1.基于域名的虚拟主机
#基于域名的虚拟主机
#客户端 hosts
192.168.10.102 www.benet.com
192.168.10.102 www.accp.com
#服务端
[root@localhost nginx]# vim conf/nginx.conf
#更改以下内容
server {
server_name  www.benet.com;
access_log  logs/www.benet.com.access.log; 
}
server {
server_name  www.accp.com;
access_log  logs/www.accp.com.access.log;
}
[root@localhost nginx]# mkdir -p /var/www/html/benet
[root@localhost nginx]# mkdir -p /var/www/html/accp
[root@localhost nginx]# cd /var/www/html/benet/
[root@localhost benet]#echo "benet.com">index.html
[root@localhost benet]# cd /var/www/html/accp/
[root@localhost accp]# echo "accp.com">index.html
[root@localhost accp]# systemctl restart nginx
2.基于ip的虚拟主机
#基于ip的虚拟主机
#为服务器设置多个IP地址
[root@localhost ~]# cd /etc/sysconfig/network-scripts/
[root@localhost network-scripts]# cp ifcfg-ens33 ifcfg-ens33:0
[root@localhost network-scripts]# cp ifcfg-ens33 ifcfg-ens33:1
#将网卡IP以及名称更改
[root@localhost network-scripts]# vim ifcfg-ens33
IPADDR=192.168.10.210
NAME=ens33:0
DEVICE=ens33:0
#将网卡IP以及名称更改
[root@localhost network-scripts]# vim ifcfg-ens33:0
IPADDR=192.168.10.211
NAME=ens33:1
DEVICE=ens33:1
#重启网卡服务
[root@localhost network-scripts]# systemctl restart network
#查看是否生效
[root@localhost network-scripts]# ip a
#修改 Nginx的配置文件,使基于 IP 的虚拟主机生效
[root@localhost ~]# vim /usr/local/nginx/conf/nginx.conf 
    server {
        listen       192.168.10.210:80;
        server_name  www.benet.com;
   }

    server {
        listen       192.168.10.211:80;
        server_name www.accp.com;
}
[root@localhost ~]# systemctl restart nginx
3.基于端口的虚拟主机
#基于端口的虚拟主机
[root@localhost ~]# vim /usr/local/nginx/conf/nginx.conf 
    server {
        listen       192.168.10.101:8080;
        server_name  www.benet.com;
   }
    server {
        listen       192.168.10.101:8888;
        server_name www.accp.com;
}
[root@localhost ~]# systemctl restart nginx
#检测端口是否运行正常
[root@localhost ~]# netstat -anpt | grep nginx

LNMP架构部署及应用

LNMP架构
[root@localhost ~]# yum -y install mariadb-server mariadb
[root@localhost ~]# systemctl start mariadb
[root@localhost ~]# mysql -uroot
[root@localhost ~]# mysqladmin -uroot password 'pwd123'
[root@localhost ~]# mysql -uroot -ppwd123
#php安装
[root@localhost ~]# tar zxvf  php-5.5.38.tar.gz 
[root@localhost ~]# yum -y install gd libxml2-devel libjpeg-devel libpng-devel
[root@localhost ~]# cd php-5.5.38
[root@localhost php-5.5.38]# ./configure --prefix=/usr/local/php5 --with-gd --with-zlib --with-mysql=mysqlnd   --with-mysqli=mysqlnd --with-config-file-path=/usr/local/php5 --enable-mbstring --enable-fpm
[root@localhost php-5.5.38]# ls /usr/local/php5/
[root@localhost php-5.5.38]# ln -s /usr/local/php5/sbin/* /usr/local/sbin/
[root@localhost php-5.5.38]# ln -s /usr/local/php5/bin/* /usr/local/bin
[root@localhost php-5.5.38]# cp php.ini-development /usr/local/php5/php.ini
[root@localhost etc]# cd /usr/local/php5/etc
[root@localhost etc]# useradd -M -s /sbin/nologin php
[root@localhost etc]# cp php-fpm.conf.default php-fpm.conf
[root@localhost etc]# vim  php-fpm.conf
user = php
group = php
pm.max_children = 50      #最大子进程
pm.start_servers = 20	  #启动时开启的进程数
pm.min_spare_servers = 5 #最小空闲进程数
pm.max_spare_servers = 35 #最大空闲进程数
[root@localhost etc]# /usr/local/sbin/php-fpm 
[root@localhost etc]# netstat -anpt | grep php-fpm
#指定php网页给fast-cgi解析
[root@localhost etc]# vim /usr/local/nginx/conf/nginx.conf
 root  /var/www/html;
index  index.html index.htm index.php;


location ~ \.php$ {
            root           /var/www/html;
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            include        fastcgi.conf;
}
[root@localhost ~]# mkdir -p /var/www/html/ 
[root@localhost ~]# vim /var/www/html/test1.php 

<?php 
phpinfo();
?>


[root@localhost ~]# vim /var/www/html/test2.php 
<?php 
$link=mysqli_connect('127.0.0.1','root','pwd123'); 
if($link) echo "<h1>恭喜你,数据库连接成功啦!!!</h1>"; 
mysqli_close($link); 
?>
在LNMP平台中部署Web应用
#下载并部署程序代码
[root@localhost ~]# yum -y install unzip
[root@localhost ~]# unzip Discuz_X3.3_SC_UTF8.zip 
[root@localhost ~]# mkdir -p /var/www/html/bbs 
[root@localhost ~]# mv upload/* /var/www/html/bbs 
[root@localhost ~]# chown -R php:php /var/www/html/bbs/

#创建数据库
[root@localhost ~]# mysql -uroot -p 
mysql>create database bbs; 
mysql>grant all on bbs.* to runbbs@127.0.0.1 identified by 'bbs123';
mysql>grant all on bbs.* to runbbs@'localhost' identified by 'bbs123';