1. 程式人生 > >Nginx安裝配置,支援http以及https

Nginx安裝配置,支援http以及https

一、Nginx安裝

    如果yum安裝失敗,可從這個地方***下載相關rpm包,直接執行install.sh安裝即可

二、配置http

    修改配置檔案nginx.conf,安裝上邊的步驟安裝,應該是在/usr/local/webserver/nginx/conf這個目錄下

    修改配置檔案第一個server的location值如下,並在上邊加入upstream backend,這樣就可以配置多個webserver

upstream backend {
    server 192.168.1.231:10001;
    server 192.168.1.232:10001;
    server 192.168.1.233:10001;
    server 192.168.1.234:10001;
    server 192.168.1.235:10001;
}

location / {
    proxy_redirect off;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_pass http://backend;
}

三、配置https

    1.配置https,首先要生成SSL證書

# 1、首先,在安裝目錄下新建ssl資料夾,進入該目錄,例如:
mkdir /usr/local/webserver/nginx/ssl
cd /usr/local/webserver/nginx/ssl

# 2、建立伺服器私鑰,命令會讓你輸入一個口令:
openssl genrsa -des3 -out server.key 1024

# 3、建立簽名請求的證書(CSR):
openssl req -new -key server.key -out server.csr

# 4、在載入SSL支援的Nginx並使用上述私鑰時除去必須的口令:
cp server.key server.key.org
openssl rsa -in server.key.org -out server.key

# 5、最後標記證書使用上述私鑰和CSR:
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

    2.修改nginx.conf配置檔案

    將配置檔案最後邊的HTTPS server的註釋放開,修改值如下,然後在前邊加入upstream backend內容

upstream backend {
    server 192.168.1.231:10001;
    server 192.168.1.232:10001;
    server 192.168.1.233:10001;
    server 192.168.1.234:10001;
    server 192.168.1.235:10001;
}

# HTTPS server
#
server {
   listen       443 ssl;
   server_name  localhost;

   ssl_certificate      /usr/local/webserver/nginx/ssl/server.crt;
   ssl_certificate_key  /usr/local/webserver/nginx/ssl/server.key;

   ssl_session_cache    shared:SSL:1m;
   ssl_session_timeout  5m;

   ssl_ciphers  HIGH:!aNULL:!MD5;
   ssl_prefer_server_ciphers  on;

   location / {
            proxy_redirect off;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass https://backend;
   }
}

 四、配置完成後啟動server

# 進入目錄/usr/local/webserver/nginx/sbin
cd /usr/local/webserver/nginx/sbin
# 啟動
./nginx -t -c /usr/local/webserver/nginx/conf/nginx.conf

# 其他命令
/usr/local/webserver/nginx/sbin/nginx -s reload            # 重新載入配置檔案
/usr/local/webserver/nginx/sbin/nginx -s reopen            # 重啟 Nginx
/usr/local/webserver/nginx/sbin/nginx -s stop              # 停止 Nginx