feat: add nginx.md cheatsheet.
This commit is contained in:
jaywcjlove
parent
f1d7c9e585
commit
c221cd1ac3
@ -23,11 +23,13 @@ Quick Reference
|
||||
[TOML](./docs/toml.md)<!--rehype:style=background: rgb(132 132 132/var(\-\-bg\-opacity));-->
|
||||
[Markdown](./docs/markdown.md)<!--rehype:style=background: rgb(103 61 156/var(\-\-bg\-opacity));-->
|
||||
[TypeScript](./docs/typescript.md)<!--rehype:style=background: rgb(49 120 198/var(\-\-bg\-opacity));-->
|
||||
[YAML](./docs/yaml.md)<!--rehype:style=background: rgb(91 163 230/var(\-\-bg\-opacity));-->
|
||||
<!--rehype:class=home-card-->
|
||||
|
||||
## 工具包
|
||||
|
||||
[Emmet](./docs/emmet.md)<!--rehype:style=background: rgb(122 203 23/var(\-\-bg\-opacity));-->
|
||||
[nginx](./docs/nginx.md)<!--rehype:style=background: rgb(0 193 9/var(\-\-bg\-opacity));-->
|
||||
[npm](./docs/npm.md)<!--rehype:style=background: rgb(203 2 0/var(\-\-bg\-opacity));-->
|
||||
[package.json](./docs/package.json.md)<!--rehype:style=background: rgb(132 132 132/var(\-\-bg\-opacity));-->
|
||||
[Semver](./docs/semver.md)<!--rehype:style=background: rgb(106 111 141/var(\-\-bg\-opacity));-->
|
||||
@ -38,7 +40,6 @@ Quick Reference
|
||||
[VSCode](./docs/vscode.md)<!--rehype:style=background: rgb(91 163 230/var(\-\-bg\-opacity));-->
|
||||
[Vim](./docs/vim.md)<!--rehype:style=background: rgb(9 150 8/var(\-\-bg\-opacity));-->
|
||||
[XPath](./docs/xpath.md)<!--rehype:style=background: rgb(91 163 230/var(\-\-bg\-opacity));-->
|
||||
[YAML](./docs/yaml.md)<!--rehype:style=background: rgb(91 163 230/var(\-\-bg\-opacity));-->
|
||||
<!--rehype:class=home-card-->
|
||||
|
||||
## Linux 命令
|
||||
|
||||
34
docs/git.md
34
docs/git.md
@ -328,25 +328,21 @@ Git 技巧
|
||||
|
||||
### 重命名分支
|
||||
|
||||
#### **重命名**为`new`
|
||||
|
||||
```shell
|
||||
$ git branch -m <new>
|
||||
$ git branch -m <old> <new> # 重命名分支
|
||||
```
|
||||
|
||||
#### **推送**并重置
|
||||
|
||||
```shell
|
||||
$ git push origin -u <new>
|
||||
```
|
||||
|
||||
#### **删除**远程分支
|
||||
|
||||
```shell
|
||||
$ git push origin --delete <old> # 方法1
|
||||
$ git push origin :oldBranchName # 方法2
|
||||
```
|
||||
- **重命名**为`new`
|
||||
```shell
|
||||
$ git branch -m <new>
|
||||
$ git branch -m <old> <new> #重命名分支
|
||||
```
|
||||
- **推送**并重置
|
||||
```shell
|
||||
$ git push origin -u <new>
|
||||
```
|
||||
- **删除**远程分支
|
||||
```shell
|
||||
$ git push origin --delete <old> #方法1
|
||||
$ git push origin :oldBranchName #方法2
|
||||
```
|
||||
<!--rehype:className=style-timeline-->
|
||||
|
||||
### Log
|
||||
|
||||
|
||||
794
docs/nginx.md
Normal file
794
docs/nginx.md
Normal file
@ -0,0 +1,794 @@
|
||||
NGINX 备忘清单
|
||||
===
|
||||
|
||||
这个 nginx 快速参考备忘单显示了它的常用命和配置使用清单。
|
||||
|
||||
入门
|
||||
----
|
||||
|
||||
### 服务管理
|
||||
|
||||
```bash
|
||||
sudo systemctl status nginx # nginx当前状态
|
||||
sudo systemctl reload nginx # 重新加载 nginx
|
||||
sudo systemctl restart nginx # 重启nginx
|
||||
sudo nginx -t # 检查语法
|
||||
nginx # 启动
|
||||
nginx -s reload # 重启
|
||||
nginx -s stop # 关闭进程
|
||||
nginx -s quit # 平滑关闭nginx
|
||||
nginx -V # 查看nginx的安装状态，
|
||||
```
|
||||
|
||||
### 简单代理
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx
|
||||
location / {
|
||||
proxy_pass http://127.0.0.1:3000;
|
||||
proxy_redirect off;
|
||||
proxy_set_header Host $host;
|
||||
# 客户端的 IP 地址
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
# HTTP 请求端真实的IP
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
}
|
||||
```
|
||||
|
||||
### 全局变量
|
||||
<!--rehype:wrap-class=col-span-2 row-span-4-->
|
||||
|
||||
| 变量 | 说明
|
||||
:- | :-
|
||||
`$args` | 这个变量等于请求行中的参数，同 `$query_string`
|
||||
`$remote_port` | 客户端的端口
|
||||
`$content_length` | 请求头中的 `Content-length` 字段
|
||||
`$remote_user` | 已经经过 `Auth Basic Module` 验证的用户名
|
||||
`$content_type` | 请求头中的 `Content-Type` 字段
|
||||
`$request_filename` | 当前请求的文件路径，由 `root` 或alias指令与URI请求生成
|
||||
`$document_root` | 当前请求在 `root` 指令中指定的值
|
||||
`$scheme` | HTTP方法（如http，https）
|
||||
`$host` | 请求主机头字段，否则为服务器名称
|
||||
`$hostname` | 主机名
|
||||
`$http_user_agent` | 客户端`agent`信息
|
||||
`$http_cookie` | 客户端`cookie`信息
|
||||
`$server_protocol` | 请求使用的协议，通常是`HTTP/1.0`或`HTTP/1.1`
|
||||
`$server_addr` | 服务器地址，在完成一次系统调用后可以确定这个值
|
||||
`$server_name` | 服务器名称
|
||||
`$server_port` | 请求到达服务器的端口号
|
||||
`$limit_rate` | 这个变量可以限制连接速率
|
||||
`$request_method` | 客户端请求的动作，如 GET/POST
|
||||
`$request_uri` | 包含请求参数的原始URI，不包含主机名，如：`/foo/bar.php?arg=baz`
|
||||
`$remote_addr` | 客户端的IP地址
|
||||
`$uri` | 不带请求参数的当前URI，`$uri`不包含主机名，如 `/foo/bar.html`
|
||||
`$document_uri` | 与 `$uri` 相同
|
||||
`$nginx_version` | `nginx` 版本
|
||||
|
||||
更多全局变量[查看官方文档](https://nginx.org/en/docs/varindex.html)
|
||||
|
||||
### 监听端口
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80; # 标准 HTTP 协议
|
||||
listen 443 ssl; # 标准 HTTPS 协议
|
||||
listen 443 ssl http2; # 对于 http2
|
||||
listen [::]:80; # 使用 IPv6 在 80 上收听
|
||||
# 仅收听使用 IPv6
|
||||
listen [::]:80 ipv6only=on;
|
||||
}
|
||||
```
|
||||
|
||||
### 域名 (server_name)
|
||||
|
||||
```nginx
|
||||
server {
|
||||
# 监听 example.com
|
||||
server_name example.com;
|
||||
# 监听多个域
|
||||
server_name example.com www.example.com;
|
||||
# 监听所有子域
|
||||
server_name *.example.com;
|
||||
# 监听所有顶级域
|
||||
server_name example.*;
|
||||
# 监听未指定的主机名（监听 IP 地址本身）
|
||||
server_name "";
|
||||
}
|
||||
```
|
||||
|
||||
### 负载均衡(简单实例)
|
||||
|
||||
```nginx
|
||||
upstream node_js {
|
||||
server 0.0.0.0:3000;
|
||||
server 0.0.0.0:4000;
|
||||
server 127.155.142.421;
|
||||
}
|
||||
```
|
||||
|
||||
### 负载均衡(权重)
|
||||
|
||||
```nginx
|
||||
upstream test {
|
||||
server localhost:8080 weight=9;
|
||||
server localhost:8081 weight=1;
|
||||
}
|
||||
```
|
||||
|
||||
### upstream ip_hash
|
||||
|
||||
```nginx {2}
|
||||
upstream test {
|
||||
ip_hash;
|
||||
server localhost:8080;
|
||||
server localhost:8081;
|
||||
}
|
||||
```
|
||||
|
||||
解决负载均衡 `session` 的问题
|
||||
|
||||
### upstream fair
|
||||
|
||||
```nginx {2}
|
||||
upstream backend {
|
||||
fair;
|
||||
server localhost:8080;
|
||||
server localhost:8081;
|
||||
}
|
||||
```
|
||||
|
||||
响应时间短的优先分配
|
||||
|
||||
### server 可选参数
|
||||
<!--rehype:wrap-class=row-span-2-->
|
||||
|
||||
:- | :-
|
||||
:- | :-
|
||||
`weight` | 访问权重数值越高，收到请求越多
|
||||
`fail_timeout` | 指定的时间内必须提供响应
|
||||
`max_fails` | 尝试失败服务器连接的最大次数
|
||||
`down` | 标记一个服务器不再接受任何请求
|
||||
`backup` | 有服务器宕机，标记的机器接收请求
|
||||
|
||||
配置示例
|
||||
|
||||
```nginx
|
||||
upstream test {
|
||||
server 127.0.0.1:83 weight=9; # 权重
|
||||
server 127.0.0.1:83 weight=1; # 权重
|
||||
# 失败超时时间
|
||||
server 127.0.0.1:83 max_fails=3;
|
||||
server 127.0.0.1:83 weight=3 down;
|
||||
}
|
||||
```
|
||||
|
||||
### upstream url_hash
|
||||
|
||||
```nginx {2,3}
|
||||
upstream backend {
|
||||
hash $request_uri;
|
||||
hash_method crc32;
|
||||
server localhost:8080;
|
||||
server localhost:8081;
|
||||
}
|
||||
```
|
||||
|
||||
按访问url的hash结果来分配请求
|
||||
|
||||
### upstream keepalive
|
||||
|
||||
```nginx {4}
|
||||
upstream memcached_backend {
|
||||
server 127.0.0.1:11211;
|
||||
server 10.0.0.2:11211;
|
||||
keepalive 32;
|
||||
}
|
||||
```
|
||||
|
||||
激活缓存以连接到上游服务器
|
||||
|
||||
### 子文件夹中的代理
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx {1,2}
|
||||
location /folder/ { # / 很重要！
|
||||
proxy_pass http://127.0.0.1:3000/; # / 很重要！
|
||||
proxy_redirect off;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
}
|
||||
```
|
||||
|
||||
### 反向代理
|
||||
<!--rehype:wrap-class=row-span-3-->
|
||||
|
||||
#### 基础
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
server_name example.com;
|
||||
|
||||
location / {
|
||||
proxy_pass http://0.0.0.0:3000;
|
||||
# 其中 0.0.0.0:3000 是绑定在
|
||||
# 0.0.0.0端口3000 列表上的 Node.js 服务器
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
#### 基础 + (upstream)
|
||||
|
||||
```nginx
|
||||
upstream node_js {
|
||||
server 0.0.0.0:3000;
|
||||
# 其中 0.0.0.0:3000 是绑定在
|
||||
# 0.0.0.0端口3000 列表上的 Node.js 服务器
|
||||
}
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
server_name example.com;
|
||||
|
||||
location / {
|
||||
proxy_pass http://node_js;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
#### 升级连接（适用于支持 WebSockets 的应用程序）
|
||||
|
||||
```nginx
|
||||
upstream node_js {
|
||||
server 0.0.0.0:3000;
|
||||
}
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
server_name example.com;
|
||||
|
||||
location / {
|
||||
proxy_pass http://node_js;
|
||||
proxy_redirect off;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host $host;
|
||||
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
适用于 Node.js、Streamlit、Jupyter 等
|
||||
|
||||
### 静态资源（传统 Web 服务器）
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
server_name example.com;
|
||||
root /path/to/website;
|
||||
# root /www/data/ 示例，如果里面没有'root'，它将寻找 /www/data/index.html
|
||||
location / {
|
||||
}
|
||||
location /images/ { # 如果里面没有“root”，它将寻找 /www/data/images/index.html
|
||||
}
|
||||
location /videos/ { # 由于里面有“root”，它会寻找 /www/media/videos/index.html
|
||||
root /www/media;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### HTTPS 协议
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
大多数 SSL 选项取决于您的应用程序做什么或需要什么
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 443 ssl http2;
|
||||
server_name example.com;
|
||||
ssl on;
|
||||
|
||||
ssl_certificate /path/to/cert.pem;
|
||||
ssl_certificate_key /path/to/privkey.pem;
|
||||
|
||||
ssl_stapling on;
|
||||
ssl_stapling_verify on;
|
||||
ssl_trusted_certificate /path/to/fullchain.pem;
|
||||
|
||||
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||||
ssl_session_timeout 1d;
|
||||
ssl_session_cache shared:SSL:50m;
|
||||
add_header Strict-Transport-Security max-age=15768000;
|
||||
}
|
||||
```
|
||||
|
||||
您可以使用 Let's Encrypt 轻松保护您的网站/应用程序。去 [lets-encrypt](https://certbot.eff.org/lets-encrypt/ubuntuxenial-nginx.html) 获取更多信息
|
||||
|
||||
|
||||
### 重定向(301永久)
|
||||
<!--rehype:wrap-class=row-span-2-->
|
||||
|
||||
将 www.example.com 重定向到 example.com
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
server_name www.example.com;
|
||||
return 301 http://example.com$request_uri;
|
||||
}
|
||||
```
|
||||
|
||||
将 http 重定向到 https
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
server_name example.com;
|
||||
return 301 https://example.com$request_uri;
|
||||
}
|
||||
```
|
||||
|
||||
### 重定向(302临时)
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
server_name yourdomain.com;
|
||||
return 302 http://otherdomain.com;
|
||||
}
|
||||
```
|
||||
|
||||
### 永久重定向到 HTTPS 安全域
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
server_name yourdomain.com;
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
```
|
||||
|
||||
### 重定向参数
|
||||
|
||||
:- | :-
|
||||
:- | :-
|
||||
`permanent` | 永久性重定向。日志中的状态码为 `301`
|
||||
`redirect` | 临时重定向。日志中的状态码为 `302`
|
||||
|
||||
### HTTP 请求端真实的IP
|
||||
|
||||
```nginx
|
||||
location / {
|
||||
proxy_set_header X-Forwarded-For $remote_addr;
|
||||
}
|
||||
```
|
||||
<!--rehype:className=wrap-text -->
|
||||
|
||||
示例
|
||||
----
|
||||
<!--rehype:body-class=cols-6-->
|
||||
|
||||
### websocket 的代理 keepalive
|
||||
<!--rehype:wrap-class=col-span-3-->
|
||||
|
||||
```nginx
|
||||
# Upstreams
|
||||
upstream backend {
|
||||
server 127.0.0.1:3000;
|
||||
keepalive 5;
|
||||
}
|
||||
# HTTP Server
|
||||
server {
|
||||
server_name your_hostname.com;
|
||||
error_log /var/log/nginx/rocketchat.access.log;
|
||||
location / {
|
||||
proxy_pass http://backend;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host $http_host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forward-Proto http;
|
||||
proxy_set_header X-Nginx-Proxy true;
|
||||
proxy_redirect off;
|
||||
}
|
||||
}
|
||||
```
|
||||
<!--rehype:className=wrap-text -->
|
||||
|
||||
### Apache 的反向代理
|
||||
<!--rehype:wrap-class=col-span-3-->
|
||||
|
||||
```nginx
|
||||
server {
|
||||
server_name domain.tld;
|
||||
|
||||
access_log /log/domain.tld.access.log;
|
||||
error_log /log/domain.tld.error.log;
|
||||
root /var/www/domain.tld/htdocs;
|
||||
|
||||
# 将请求传递给 Apache 后端
|
||||
location / {
|
||||
proxy_pass http://backend;
|
||||
}
|
||||
# 使用后备处理静态文件
|
||||
location ~* \.(ogg|ogv|svg|svgz|eot|otf|woff|woff2|ttf|m4a|mp4|ttf|rss|atom|jpe?g|gif|cur|heic|png|tiff|ico|zip|webm|mp3|aac|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf|swf|webp)$ {
|
||||
add_header "Access-Control-Allow-Origin" "*";
|
||||
access_log off;
|
||||
log_not_found off;
|
||||
expires max;
|
||||
try_files $uri @fallback;
|
||||
}
|
||||
# 如果找不到文件，则回退以将请求传递给 Apache
|
||||
location @fallback {
|
||||
proxy_pass http://backend;
|
||||
}
|
||||
}
|
||||
```
|
||||
<!--rehype:className=wrap-text -->
|
||||
|
||||
### Gitlab 的反向代理
|
||||
<!--rehype:wrap-class=col-span-4 row-span-3-->
|
||||
|
||||
```nginx
|
||||
server {
|
||||
#侦听的80端口
|
||||
listen 80;
|
||||
server_name git.example.cn;
|
||||
location / {
|
||||
proxy_pass http://localhost:3000;
|
||||
# 以下是一些反向代理的配置可删除
|
||||
proxy_redirect off;
|
||||
# 后端的Web服务器可以通过X-Forwarded-For获取用户真实IP
|
||||
proxy_set_header Host $host;
|
||||
client_max_body_size 10m; # 允许客户端请求的最大单文件字节数
|
||||
client_body_buffer_size 128k; # 缓冲区代理缓冲用户端请求的最大字节数
|
||||
proxy_connect_timeout 300; # nginx跟后端服务器连接超时时间(代理连接超时)
|
||||
proxy_send_timeout 300; # 后端服务器数据回传时间(代理发送超时)
|
||||
proxy_read_timeout 300; # 连接成功后，后端服务器响应时间(代理接收超时)
|
||||
# 设置代理服务器（nginx）保存用户头信息的缓冲区大小
|
||||
proxy_buffer_size 4k;
|
||||
# proxy_buffers缓冲区，网页平均在32k以下的话，这样设置
|
||||
proxy_buffers 4 32k;
|
||||
# 高负荷下缓冲大小（proxy_buffers*2）
|
||||
proxy_busy_buffers_size 64k;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### 重定向整个网站
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx
|
||||
server {
|
||||
server_name old-site.com;
|
||||
return 301 $scheme://new-site.com$request_uri;
|
||||
}
|
||||
```
|
||||
<!--rehype:className=wrap-text -->
|
||||
|
||||
### 重定向单页
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx
|
||||
server {
|
||||
location = /oldpage.html {
|
||||
return 301 http://example.org/newpage.html;
|
||||
}
|
||||
}
|
||||
```
|
||||
<!--rehype:className=wrap-text -->
|
||||
|
||||
### 重定向整个子路径
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx
|
||||
location /old-site {
|
||||
rewrite ^/old-site/(.*) http://example.org/new-site/$1 permanent;
|
||||
}
|
||||
```
|
||||
<!--rehype:className=wrap-text -->
|
||||
|
||||
### 负载均衡
|
||||
<!--rehype:wrap-class=col-span-3-->
|
||||
|
||||
```nginx
|
||||
upstream example {
|
||||
ip_hash;
|
||||
# upstream的负载均衡，weight是权重，可以根据机器配置定义权重。
|
||||
# weigth参数表示权值，权值越高被分配到的几率越大。
|
||||
server 192.168.122.11:8081 ;
|
||||
server 127.0.0.1:82 weight=3;
|
||||
server 127.0.0.1:83 weight=3 down;
|
||||
server 127.0.0.1:84 weight=3; max_fails=3 fail_timeout=20s;
|
||||
server 127.0.0.1:85 weight=4;;
|
||||
keepalive 32;
|
||||
}
|
||||
server {
|
||||
#侦听的80端口
|
||||
listen 80;
|
||||
server_name git.example.cn;
|
||||
location / {
|
||||
# 在这里设置一个代理，和 upstream 的名字一样
|
||||
proxy_pass http://example;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### 内容缓存
|
||||
<!--rehype:wrap-class=col-span-3-->
|
||||
|
||||
允许浏览器基本上永久地缓存静态内容。 Nginx 将为您设置 Expires 和 Cache-Control 头信息
|
||||
|
||||
```nginx {3}
|
||||
location /static {
|
||||
root /data;
|
||||
expires max;
|
||||
}
|
||||
```
|
||||
|
||||
如果要求浏览器永远不会缓存响应（例如用于跟踪请求），请使用 `-1`
|
||||
|
||||
```nginx {3}
|
||||
location = /empty.gif {
|
||||
empty_gif;
|
||||
expires -1;
|
||||
}
|
||||
```
|
||||
|
||||
### 跨域问题
|
||||
<!--rehype:wrap-class=col-span-3-->
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
server_name api.xxx.com;
|
||||
|
||||
add_header 'Access-Control-Allow-Origin' '*';
|
||||
add_header 'Access-Control-Allow-Credentials' 'true';
|
||||
add_header 'Access-Control-Allow-Methods' 'GET,POST,HEAD';
|
||||
|
||||
location / {
|
||||
proxy_pass http://127.0.0.1:3000;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header Host $http_host;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### 重定向 URI 来解决跨域问题
|
||||
<!--rehype:wrap-class=col-span-3 row-span-2-->
|
||||
|
||||
```nginx
|
||||
upstream test {
|
||||
server 127.0.0.1:8080;
|
||||
server localhost:8081;
|
||||
}
|
||||
server {
|
||||
listen 80;
|
||||
server_name api.xxx.com;
|
||||
location / {
|
||||
root html; # 去请求../html文件夹里的文件
|
||||
index index.html index.htm; # 首页响应地址
|
||||
}
|
||||
# 用于拦截请求，匹配任何以 /api/开头的地址，
|
||||
# 匹配符合以后，停止往下搜索正则。
|
||||
location ^~/api/{
|
||||
# 代表重写拦截进来的请求，并且只能对域名后边的除去传递的参数外的字符串起作用
|
||||
# 例如www.a.com/api/msg?meth=1&par=2重写，只对/api/msg重写。
|
||||
# rewrite后面的参数是一个简单的正则 ^/api/(.*)$，
|
||||
# $1代表正则中的第一个()，$2代表第二个()的值，以此类推。
|
||||
rewrite ^/api/(.*)$ /$1 break;
|
||||
|
||||
# 把请求代理到其他主机
|
||||
# 其中 http://www.b.com/ 写法和 http://www.b.com写法的区别如下
|
||||
# 如果你的请求地址是他 http://server/html/test.jsp
|
||||
# 配置一： http://www.b.com/ 后面有“/”
|
||||
# 将反向代理成 http://www.b.com/html/test.jsp 访问
|
||||
# 配置一： http://www.b.com 后面没有有“/”
|
||||
# 将反向代理成 http://www.b.com/test.jsp 访问
|
||||
proxy_pass http://test;
|
||||
|
||||
# 如果 proxy_pass URL 是 http://a.xx.com/platform/ 这种情况
|
||||
# proxy_cookie_path应该设置成 /platform/ / (注意两个斜杠之间有空格)。
|
||||
proxy_cookie_path /platfrom/ /;
|
||||
|
||||
# 设置 Cookie 头通过
|
||||
proxy_pass_header Set-Cookie;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### 跳转到带 www 的域上面
|
||||
<!--rehype:wrap-class=col-span-3-->
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
# 配置正常的带www的域名
|
||||
server_name www.wangchujiang.com;
|
||||
root /home/www/wabg/download;
|
||||
location / {
|
||||
try_files $uri $uri/ /index.html =404;
|
||||
}
|
||||
}
|
||||
|
||||
server {
|
||||
# 将不带 www 的 wangchujiang.com
|
||||
# 永久性重定向到 https://www.wangchujiang.com
|
||||
server_name wangchujiang.com;
|
||||
rewrite ^(.*) https://www.wangchujiang.com$1 permanent;
|
||||
}
|
||||
```
|
||||
|
||||
### 代理转发
|
||||
<!--rehype:wrap-class=col-span-2 row-span-2-->
|
||||
|
||||
```nginx
|
||||
upstream server-api {
|
||||
# api 代理服务地址
|
||||
server 127.0.0.1:3110;
|
||||
}
|
||||
upstream server-resource {
|
||||
# 静态资源 代理服务地址
|
||||
server 127.0.0.1:3120;
|
||||
}
|
||||
server {
|
||||
listen 3111;
|
||||
server_name localhost; # 这里指定域名
|
||||
root /home/www/server-statics;
|
||||
# 匹配 api 路由的反向代理到API服务
|
||||
location ^~/api/ {
|
||||
rewrite ^/(.*)$ /$1 break;
|
||||
proxy_pass http://server-api;
|
||||
}
|
||||
# 假设这里验证码也在API服务中
|
||||
location ^~/captcha {
|
||||
rewrite ^/(.*)$ /$1 break;
|
||||
proxy_pass http://server-api;
|
||||
}
|
||||
# 假设你的图片资源全部在另外一个服务上面
|
||||
location ^~/img/ {
|
||||
rewrite ^/(.*)$ /$1 break;
|
||||
proxy_pass http://server-resource;
|
||||
}
|
||||
# 路由在前端，后端没有真实路由，
|
||||
# 路由不存在的 404 状态的页面返回 /index.html
|
||||
# 使用场景，用在 React/Vue项目没有真实路由
|
||||
location / {
|
||||
try_files $uri $uri/ /index.html =404;
|
||||
# 空格很重要 ^
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### 屏蔽 IP
|
||||
<!--rehype:wrap-class=col-span-4-->
|
||||
|
||||
可以放到 `http`, `server`, `location`, `limit_except` 语句块
|
||||
|
||||
```nginx
|
||||
include blockip.conf;
|
||||
```
|
||||
|
||||
在 `blockip.conf` 里面输入内容，如：
|
||||
|
||||
```nginx
|
||||
deny 165.91.122.67;
|
||||
|
||||
deny IP; # 屏蔽单个 ip 访问
|
||||
allow IP; # 允许单个 ip 访问
|
||||
deny all; # 屏蔽所有 ip 访问
|
||||
allow all; # 允许所有 ip 访问
|
||||
deny 123.0.0.0/8; # 屏蔽整个段即从 123.0.0.1 到 123.255.255.254 访问的命令
|
||||
deny 124.45.0.0/16; # 屏蔽IP段即从 123.45.0.1 到 123.45.255.254 访问的命令
|
||||
deny 123.45.6.0/24; # 屏蔽IP段即从 123.45.6.1 到 123.45.6.254 访问的命令
|
||||
|
||||
# 如果你想实现这样的应用，除了几个IP外，其他全部拒绝
|
||||
allow 1.1.1.1;
|
||||
allow 1.1.1.2;
|
||||
deny all;
|
||||
```
|
||||
|
||||
### 强制将 http 重定向到 https
|
||||
<!--rehype:wrap-class=col-span-4-->
|
||||
|
||||
```nginx
|
||||
server {
|
||||
listen 80;
|
||||
server_name example.com;
|
||||
rewrite ^ https://$http_host$request_uri? permanent; # 强制将 http 重定向到 https
|
||||
# 在错误页面和“服务器”响应头字段中启用或禁用发射nginx版本。 防止黑客利用版本漏洞攻击
|
||||
server_tokens off;
|
||||
}
|
||||
```
|
||||
|
||||
### 代理转发连接替换
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx
|
||||
location ^~/api/upload {
|
||||
rewrite ^/(.*)$ /wfs/v1/upload break;
|
||||
proxy_pass http://wfs-api;
|
||||
}
|
||||
```
|
||||
|
||||
将地址 `/api/upload` 替换为 `/wfs/v1/upload`
|
||||
|
||||
### 爬虫 User-Agent 过滤
|
||||
<!--rehype:wrap-class=col-span-4-->
|
||||
|
||||
```nginx
|
||||
location / {
|
||||
if ($http_user_agent ~* "python|curl|java|wget|httpclient|okhttp") {
|
||||
return 503;
|
||||
}
|
||||
# 正常处理
|
||||
# ...
|
||||
}
|
||||
```
|
||||
|
||||
### 图片防盗链
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx
|
||||
location ~* \.(gif|jpg|png|swf|flv)$ {
|
||||
root html;
|
||||
|
||||
valid_referers none blocked *.nginx.com;
|
||||
|
||||
if ($invalid_referer) {
|
||||
rewrite ^/ www.nginx.cn;
|
||||
# return 404;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### 虚拟目录配置
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx
|
||||
location /img/ {
|
||||
alias /var/www/image/;
|
||||
}
|
||||
# 访问 /img/ 目录里面的文件时，
|
||||
# 会自动去 /var/www/image/ 目录找文件
|
||||
location /img/ {
|
||||
root /var/www/image;
|
||||
}
|
||||
# 访问 /img/ 目录下的文件时，
|
||||
# 会去 /var/www/image/img/ 目录下找文件
|
||||
```
|
||||
|
||||
### 屏蔽 .git 等文件
|
||||
<!--rehype:wrap-class=col-span-2-->
|
||||
|
||||
```nginx
|
||||
location ~ (.git|.gitattributes|.gitignore|.svn) {
|
||||
deny all;
|
||||
}
|
||||
```
|
||||
<!--rehype:className=wrap-text -->
|
||||
|
||||
### 防盗图配置
|
||||
<!--rehype:wrap-class=col-span-4-->
|
||||
|
||||
```nginx
|
||||
location ~ \/public\/(css|js|img)\/.*\.(js|css|gif|jpg|jpeg|png|bmp|swf) {
|
||||
valid_referers none blocked *.jslite.io;
|
||||
if ($invalid_referer) {
|
||||
rewrite ^/ http://wangchujiang.com/piratesp.png;
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
另见
|
||||
---
|
||||
|
||||
- [Nginx 安装维护入门学习笔记](https://jaywcjlove.github.io/nginx-tutorial) _(jaywcjlove.github.io)_
|
||||
3
scripts/assets/nginx.svg
Normal file
3
scripts/assets/nginx.svg
Normal file
@ -0,0 +1,3 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" width="46" height="52" viewBox="0 0 46 52">
|
||||
<path d="M21.6686953,0.373850863 C22.4859141,-0.124616954 23.5140859,-0.124616954 24.3575391,0.373850863 L44.6555781,12.0199042 C45.4992109,12.491911 46,13.3837179 46,14.3541925 L46,37.6459416 C46,38.6164162 45.4992109,39.5084019 44.6555781,39.9804087 L24.3575391,51.6262832 C23.5403203,52.1245723 22.5123281,52.1245723 21.6686953,51.6262832 L1.37083594,39.9804087 C0.948929687,39.7444053 0.606265625,39.4295553 0.369078125,39.009934 C0.105476562,38.5903128 0,38.1444094 0,37.672045 L0,14.3541925 C0,13.3837179 0.500789062,12.491911 1.37101563,12.0199042 Z M32.1078203,14.5377872 C31.4147694,14.5348957 30.749258,14.8075453 30.2591927,15.2951641 C29.7691273,15.782783 29.4951098,16.444972 29.4980391,17.134563 L29.4980391,30.0655834 L18.5843594,17.0821774 L17.7937344,16.1378062 C16.9238672,15.0623815 15.4739687,14.5640925 14.2348437,14.5640925 C12.5215234,14.5640925 11.2825549,15.6919028 11.2825549,17.0821774 L11.2825549,34.8918533 C11.2796492,35.5814132 11.5536421,36.2435748 12.0436685,36.7311885 C12.5336949,37.2188021 13.1991599,37.4914728 13.8921797,37.4886291 C14.5852306,37.4915206 15.250742,37.218871 15.7408073,36.7312522 C16.2308727,36.2436333 16.5048902,35.5814443 16.5019609,34.8918533 L16.5019609,21.9869363 L28.2062656,35.8886101 C29.0761328,36.9640348 30.5260312,37.4623238 31.7651562,37.4623238 C33.4784766,37.4623238 34.7174451,36.3345135 34.7174451,34.9444177 L34.7174451,17.134563 C34.7203508,16.4450031 34.4463579,15.7828415 33.9563315,15.2952278 C33.4663051,14.8076142 32.8008401,14.5349435 32.1078203,14.5377872 Z"/>
|
||||
</svg>
|
||||
|
After Width: | Height: | Size: 1.6 KiB |
@ -677,6 +677,9 @@ body:not(.home) .h2wrap > h2 a::after {
|
||||
.cols-5 {
|
||||
grid-template-columns: repeat(5,minmax(0,1fr)) !important;
|
||||
}
|
||||
.cols-6 {
|
||||
grid-template-columns: repeat(6,minmax(0,1fr)) !important;
|
||||
}
|
||||
.col-span-2 {
|
||||
grid-column: span 2/span 2;
|
||||
}
|
||||
@ -886,6 +889,13 @@ body:not(.home) .h2wrap > h2 a::after {
|
||||
.footer-wrap {
|
||||
font-size: 0.75rem;
|
||||
}
|
||||
table td, table th {
|
||||
display: block;
|
||||
text-align: left !important;
|
||||
}
|
||||
table td + td, table th + th {
|
||||
padding-top: 0 !important;
|
||||
}
|
||||
}
|
||||
|
||||
@media (min-width: 768px) {
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user