ARTICLE · INTELLIGENCE

战地情报 · 详情页

来自尧图项目组的一线实战观察与深度解析

nginx搭建网站

nginx搭建网站
sudo yum install nginx /var/www/example.com # 放网站文件 /var/log/nginx/example.com # 放日志文件 /etc/nginx/nginx.conf # 配置文件
# https server块 server { listen 443 ssl; listen [::]:443 ssl; server_name _; root /var/www/example.com/; index index.html; access_log /var/log/nginx/example.com/access.log; error_log /var/log/nginx/example.com/error.log; ssl_certificate /etc/pki/tls/certs/example.com.crt; ssl_certificate_key /etc/pki/tls/private/example.com.key; }
# http重定向至https server { listen 80 default_server; server_name _; return 301 https://$host$request_uri; }
semanage fcontext -a -t httpd_sys_content_t "/var/www/example.com(/.*)?" restorecon -Rv /var/www/example.com/ semanage fcontext -a -t httpd_sys_content_t "/var/www/example.net(/.\*)?" restorecon -Rv /var/www/example.net/
chown root:root /etc/pki/tls/private/example.com.key # 权限 chmod 600 /etc/pki/tls/private/example.com.key # 权限

nginx做反向代理

http { server { listen 80; server_name localhost; # 你的域名 location / { proxy_pass http://127.0.0.1:8080; proxy_set_header Host $host; # 传递原始Host头 proxy_set_header X-Real-IP $remote_addr; # 记录客户端原始ip proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # 记录代理链 } } }
RELATED READING

延伸阅读

更多一线实战笔记与深度复盘,助您持续精进