手把手以实例叫你学习nginx配置
Author：zhoulujun@live.cn Date：
所谓手把手，就是把自己的nginx.conf配置文件copy出来，然后在仔细看代码！
做了注释，最底下是最近的配置文件
#user nobody;
worker_processes 1;
#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;
#pid logs/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
#access_log logs/access.log main;
sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
gzip on;
#一个监听服务
server {
# 比如监听 80端口下服务
listen 80;
# 监听地址
server_name localhost;
# NGINX的proxy_redirect功能比较强大,其作用是对发送给客户端的URL进行修改。以例子说明：
# server {
# listen 80;
# server_name localhost;
# location {
# proxy_pass http://10.10.10.1:9080;
# }
# }
# 这段配置一般情况下都正常,但偶尔会出错, 错误在什么地方呢? 抓包发现服务器给客户端的跳转指令里加了端口号,如 Location: http://test.abc.com:9080/abc.html 。因为nginx服务器侦听的是80端口，所以这样的URL给了客户端,必然会出错.针对这种情况, 加一条proxy_redirect指令: proxy_redirect http://test.abc.com:9080/ / ,把所有“http://test.abc.com:9080/”的内容替换成“/”再发给客户端，就解决了。
# server {
# listen 80;
# server_name test.abc.com;
# proxy_redirect http://test.abc.com:9080/ /;
# location / {
# proxy_pass http://10.10.10.1:9080;
# }
# }
#
proxy_redirect http://192.168.1.85:8080/jsse/ /;
# 例子，有如下匹配规则：
# location = / {
# #规则A
# }
# location = /login {
# #规则B
# }
# location ^~ /static/ {
# #规则C
# }
# location ~ \.(gif|jpg|png|js|css)$ {
# #规则D
# }
# location ~* \.png$ {
# #规则E
# }
# location !~ \.xhtml$ {
# #规则F
# }
# location !~* \.xhtml$ {
# #规则G
# }
# location / {
# #规则H
# }
# 那么产生的效果如下：
# 访问根目录/， 比如http://localhost/ 将匹配规则A
# 访问 http://localhost/login 将匹配规则B，http://localhost/register 则匹配规则H
# 访问 http://localhost/static/a.html 将匹配规则C
# 访问 http://localhost/a.gif, http://localhost/b.jpg 将匹配规则D和规则E，但是规则D顺序优先，规则E不起作用，而 http://localhost/static/c.png 则优先匹配到规则C
# 访问 http://localhost/a.PNG 则匹配规则E，而不会匹配规则D，因为规则E不区分大小写。
# 访问 http://localhost/a.xhtml 不会匹配规则F和规则G，http://localhost/a.XHTML不会匹配规则G，因为不区分大小写。规则F，规则G属于排除法，符合匹配规则但是不会匹配到，所以想想看实际应用中哪里会用到。
# 访问 http://localhost/category/id/1111 则最终匹配到规则H，因为以上规则都不匹配，这个时候应该是nginx转发请求给后端应用服务器，比如FastCGI（php），tomcat（jsp），nginx作为方向代理服务器存在。
# 防盗链
# location ~* \.(gif|jpg|swf)$ {
# valid_referers none blocked start.igrow.cn sta.igrow.cn;
# if ($invalid_referer) {
# rewrite ^/ http://$host/logo.png;
# }
# }
# 六、根据文件类型设置过期时间
# location ~* \.(js|css|jpg|jpeg|gif|png|swf)$ {
# if (-f $request_filename) {
# expires 1h;
# break;
# }
# }
# 七、禁止访问某个目录
# location ~* \.(txt|doc)${
# root /data/www/wwwroot/linuxtone/test;
# deny all;
# }
location / {
# 转发地址
proxy_pass http://localhost:8484;
proxy_redirect default;
proxy_set_header Host $host:$proxy_port;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location /jsse/ {
proxy_pass http://192.168.1.85:8080/jsse/;
proxy_redirect default;
proxy_set_header Host $host:$proxy_port;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 8038;
server_name localhost;
#charset koi8-r;
#access_log logs/host.access.log main;
location / {
root html;
index index.html index.htm;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ \.php$ {
# proxy_pass http://127.0.0.1;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ \.php$ {
# root html;
# fastcgi_pass 127.0.0.1:9000;
# fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
# include fastcgi_params;
#}
# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
}
# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
# listen 8000;
# listen somename:8080;
# server_name somename alias another.alias;
# location / {
# root html;
# index index.html index.htm;
# }
#}
# HTTPS server
#
#server {
# listen 443 ssl;
# server_name localhost;
# ssl_certificate cert.pem;
# ssl_certificate_key cert.key;
# ssl_session_cache shared:SSL:1m;
# ssl_session_timeout 5m;
# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;
# location / {
# root html;
# index index.html index.htm;
# }
#}
}
#user nobody;worker_processes 1;#error_log logs/error.log;#error_log logs/error.log notice;#error_log logs/error.log info;#pid logs/nginx.pid;events { worker_connections 1024;}http { include mime.types; default_type application/octet-stream; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65; gzip on; #一个监听服务 server {# 比如监听 80端口下服务 listen 80;# 监听地址 server_name localhost;# NGINX的proxy_redirect功能比较强大,其作用是对发送给客户端的URL进行修改。以例子说明：# server { # listen 80; # server_name localhost; # location {# proxy_pass http://10.10.10.1:9080;# }# }# 这段配置一般情况下都正常,但偶尔会出错, 错误在什么地方呢? 抓包发现服务器给客户端的跳转指令里加了端口号,如 Location: http://test.abc.com:9080/abc.html 。因为nginx服务器侦听的是80端口，所以这样的URL给了客户端,必然会出错.针对这种情况, 加一条proxy_redirect指令: proxy_redirect http://test.abc.com:9080/ / ,把所有“http://test.abc.com:9080/”的内容替换成“/”再发给客户端，就解决了。# server {# listen 80;# server_name test.abc.com;# proxy_redirect http://test.abc.com:9080/ /;# location / {# proxy_pass http://10.10.10.1:9080;# }# }# proxy_redirect http://192.168.1.85:8080/jsse/ /;# 例子，有如下匹配规则：# location = / {# #规则A# }# location = /login {# #规则B# }# location ^~ /static/ {# #规则C# }# location ~ \.(gif|jpg|png|js|css)$ {# #规则D# }# location ~* \.png$ {# #规则E# }# location !~ \.xhtml$ {# #规则F# }# location !~* \.xhtml$ {# #规则G# }# location / {# #规则H# }# 那么产生的效果如下：# 访问根目录/， 比如http://localhost/ 将匹配规则A# 访问 http://localhost/login 将匹配规则B，http://localhost/register 则匹配规则H# 访问 http://localhost/static/a.html 将匹配规则C# 访问 http://localhost/a.gif, http://localhost/b.jpg 将匹配规则D和规则E，但是规则D顺序优先，规则E不起作用，而 http://localhost/static/c.png 则优先匹配到规则C# 访问 http://localhost/a.PNG 则匹配规则E，而不会匹配规则D，因为规则E不区分大小写。# 访问 http://localhost/a.xhtml 不会匹配规则F和规则G，http://localhost/a.XHTML不会匹配规则G，因为不区分大小写。规则F，规则G属于排除法，符合匹配规则但是不会匹配到，所以想想看实际应用中哪里会用到。# 访问 http://localhost/category/id/1111 则最终匹配到规则H，因为以上规则都不匹配，这个时候应该是nginx转发请求给后端应用服务器，比如FastCGI（php），tomcat（jsp），nginx作为方向代理服务器存在。# 防盗链# location ~* \.(gif|jpg|swf)$ { # valid_referers none blocked start.igrow.cn sta.igrow.cn; # if ($invalid_referer) { # rewrite ^/ http://$host/logo.png; # }# }# 六、根据文件类型设置过期时间# location ~* \.(js|css|jpg|jpeg|gif|png|swf)$ { # if (-f $request_filename) { # expires 1h; # break; # }# }# 七、禁止访问某个目录# location ~* \.(txt|doc)${ # root /data/www/wwwroot/linuxtone/test; # deny all;# } location / {# 转发地址 proxy_pass http://localhost:8484; proxy_redirect default; proxy_set_header Host $host:$proxy_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } location /jsse/ { proxy_pass http://192.168.1.85:8080/jsse/; proxy_redirect default; proxy_set_header Host $host:$proxy_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } server { listen 8038; server_name localhost; #charset koi8-r; #access_log logs/host.access.log main; location / { root html; index index.html index.htm; } #error_page 404 /404.html; # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root html; } # proxy the PHP scripts to Apache listening on 127.0.0.1:80 # #location ~ \.php$ { # proxy_pass http://127.0.0.1; #} # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 # #location ~ \.php$ { # root html; # fastcgi_pass 127.0.0.1:9000; # fastcgi_index index.php; # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; # include fastcgi_params; #} # deny access to .htaccess files, if Apache's document root # concurs with nginx's one # #location ~ /\.ht { # deny all; #} } # another virtual host using mix of IP-, name-, and port-based configuration # #server { # listen 8000; # listen somename:8080; # server_name somename alias another.alias; # location / { # root html; # index index.html index.htm; # } #} # HTTPS server # #server { # listen 443 ssl; # server_name localhost; # ssl_certificate cert.pem; # ssl_certificate_key cert.key; # ssl_session_cache shared:SSL:1m; # ssl_session_timeout 5m; # ssl_ciphers HIGH:!aNULL:!MD5; # ssl_prefer_server_ciphers on; # location / { # root html; # index index.html index.htm; # } #}}#user nobody;worker_processes 1;#error_log logs/error.log;#error_log logs/error.log notice;#error_log logs/error.log info;#pid logs/nginx.pid;events { worker_connections 1024;}http { include mime.types; default_type application/octet-stream; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65; gzip on; #一个监听服务 server {# 比如监听 80端口下服务 listen 80;# 监听地址 server_name localhost;# NGINX的proxy_redirect功能比较强大,其作用是对发送给客户端的URL进行修改。以例子说明：# server { # listen 80; # server_name localhost; # location {# proxy_pass http://10.10.10.1:9080;# }# }# 这段配置一般情况下都正常,但偶尔会出错, 错误在什么地方呢? 抓包发现服务器给客户端的跳转指令里加了端口号,如 Location: http://test.abc.com:9080/abc.html 。因为nginx服务器侦听的是80端口，所以这样的URL给了客户端,必然会出错.针对这种情况, 加一条proxy_redirect指令: proxy_redirect http://test.abc.com:9080/ / ,把所有“http://test.abc.com:9080/”的内容替换成“/”再发给客户端，就解决了。# server {# listen 80;# server_name test.abc.com;# proxy_redirect http://test.abc.com:9080/ /;# location / {# proxy_pass http://10.10.10.1:9080;# }# }# proxy_redirect http://192.168.1.85:8080/jsse/ /;# 例子，有如下匹配规则：# location = / {# #规则A# }# location = /login {# #规则B# }# location ^~ /static/ {# #规则C# }# location ~ \.(gif|jpg|png|js|css)$ {# #规则D# }# location ~* \.png$ {# #规则E# }# location !~ \.xhtml$ {# #规则F# }# location !~* \.xhtml$ {# #规则G# }# location / {# #规则H# }# 那么产生的效果如下：# 访问根目录/， 比如http://localhost/ 将匹配规则A# 访问 http://localhost/login 将匹配规则B，http://localhost/register 则匹配规则H# 访问 http://localhost/static/a.html 将匹配规则C# 访问 http://localhost/a.gif, http://localhost/b.jpg 将匹配规则D和规则E，但是规则D顺序优先，规则E不起作用，而 http://localhost/static/c.png 则优先匹配到规则C# 访问 http://localhost/a.PNG 则匹配规则E，而不会匹配规则D，因为规则E不区分大小写。# 访问 http://localhost/a.xhtml 不会匹配规则F和规则G，http://localhost/a.XHTML不会匹配规则G，因为不区分大小写。规则F，规则G属于排除法，符合匹配规则但是不会匹配到，所以想想看实际应用中哪里会用到。# 访问 http://localhost/category/id/1111 则最终匹配到规则H，因为以上规则都不匹配，这个时候应该是nginx转发请求给后端应用服务器，比如FastCGI（php），tomcat（jsp），nginx作为方向代理服务器存在。# 防盗链# location ~* \.(gif|jpg|swf)$ { # valid_referers none blocked start.igrow.cn sta.igrow.cn; # if ($invalid_referer) { # rewrite ^/ http://$host/logo.png; # }# }# 六、根据文件类型设置过期时间# location ~* \.(js|css|jpg|jpeg|gif|png|swf)$ { # if (-f $request_filename) { # expires 1h; # break; # }# }# 七、禁止访问某个目录# location ~* \.(txt|doc)${ # root /data/www/wwwroot/linuxtone/test; # deny all;# } location / {# 转发地址 proxy_pass http://localhost:8484; proxy_redirect default; proxy_set_header Host $host:$proxy_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } location /jsse/ { proxy_pass http://192.168.1.85:8080/jsse/; proxy_redirect default; proxy_set_header Host $host:$proxy_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } server { listen 8038; server_name localhost; #charset koi8-r; #access_log logs/host.access.log main; location / { root html; index index.html index.htm; } #error_page 404 /404.html; # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root html; } # proxy the PHP scripts to Apache listening on 127.0.0.1:80 # #location ~ \.php$ { # proxy_pass http://127.0.0.1; #} # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 # #location ~ \.php$ { # root html; # fastcgi_pass 127.0.0.1:9000; # fastcgi_index index.php; # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; # include fastcgi_params; #} # deny access to .htaccess files, if Apache's document root # concurs with nginx's one # #location ~ /\.ht { # deny all; #} } # another virtual host using mix of IP-, name-, and port-based configuration # #server { # listen 8000; # listen somename:8080; # server_name somename alias another.alias; # location / { # root html; # index index.html index.htm; # } #} # HTTPS server # #server { # listen 443 ssl; # server_name localhost; # ssl_certificate cert.pem; # ssl_certificate_key cert.key; # ssl_session_cache shared:SSL:1m; # ssl_session_timeout 5m; # ssl_ciphers HIGH:!aNULL:!MD5; # ssl_prefer_server_ciphers on; # location / { # root html; # index index.html index.htm; # } #}}#user nobody;worker_processes 1;#error_log logs/error.log;#error_log logs/error.log notice;#error_log logs/error.log info;#pid logs/nginx.pid;events { worker_connections 1024;}http { include mime.types; default_type application/octet-stream; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65; gzip on; #一个监听服务 server {# 比如监听 80端口下服务 listen 80;# 监听地址 server_name localhost;# NGINX的proxy_redirect功能比较强大,其作用是对发送给客户端的URL进行修改。以例子说明：# server { # listen 80; # server_name localhost; # location {# proxy_pass http://10.10.10.1:9080;# }# }# 这段配置一般情况下都正常,但偶尔会出错, 错误在什么地方呢? 抓包发现服务器给客户端的跳转指令里加了端口号,如 Location: http://test.abc.com:9080/abc.html 。因为nginx服务器侦听的是80端口，所以这样的URL给了客户端,必然会出错.针对这种情况, 加一条proxy_redirect指令: proxy_redirect http://test.abc.com:9080/ / ,把所有“http://test.abc.com:9080/”的内容替换成“/”再发给客户端，就解决了。# server {# listen 80;# server_name test.abc.com;# proxy_redirect http://test.abc.com:9080/ /;# location / {# proxy_pass http://10.10.10.1:9080;# }# }# proxy_redirect http://192.168.1.85:8080/jsse/ /;# 例子，有如下匹配规则：# location = / {# #规则A# }# location = /login {# #规则B# }# location ^~ /static/ {# #规则C# }# location ~ \.(gif|jpg|png|js|css)$ {# #规则D# }# location ~* \.png$ {# #规则E# }# location !~ \.xhtml$ {# #规则F# }# location !~* \.xhtml$ {# #规则G# }# location / {# #规则H# }# 那么产生的效果如下：# 访问根目录/， 比如http://localhost/ 将匹配规则A# 访问 http://localhost/login 将匹配规则B，http://localhost/register 则匹配规则H# 访问 http://localhost/static/a.html 将匹配规则C# 访问 http://localhost/a.gif, http://localhost/b.jpg 将匹配规则D和规则E，但是规则D顺序优先，规则E不起作用，而 http://localhost/static/c.png 则优先匹配到规则C# 访问 http://localhost/a.PNG 则匹配规则E，而不会匹配规则D，因为规则E不区分大小写。# 访问 http://localhost/a.xhtml 不会匹配规则F和规则G，http://localhost/a.XHTML不会匹配规则G，因为不区分大小写。规则F，规则G属于排除法，符合匹配规则但是不会匹配到，所以想想看实际应用中哪里会用到。# 访问 http://localhost/category/id/1111 则最终匹配到规则H，因为以上规则都不匹配，这个时候应该是nginx转发请求给后端应用服务器，比如FastCGI（php），tomcat（jsp），nginx作为方向代理服务器存在。# 防盗链# location ~* \.(gif|jpg|swf)$ { # valid_referers none blocked start.igrow.cn sta.igrow.cn; # if ($invalid_referer) { # rewrite ^/ http://$host/logo.png; # }# }# 六、根据文件类型设置过期时间# location ~* \.(js|css|jpg|jpeg|gif|png|swf)$ { # if (-f $request_filename) { # expires 1h; # break; # }# }# 七、禁止访问某个目录# location ~* \.(txt|doc)${ # root /data/www/wwwroot/linuxtone/test; # deny all;# } location / {# 转发地址 proxy_pass http://localhost:8484; proxy_redirect default; proxy_set_header Host $host:$proxy_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } location /jsse/ { proxy_pass http://192.168.1.85:8080/jsse/; proxy_redirect default; proxy_set_header Host $host:$proxy_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } server { listen 8038; server_name localhost; #charset koi8-r; #access_log logs/host.access.log main; location / { root html; index index.html index.htm; } #error_page 404 /404.html; # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root html; } # proxy the PHP scripts to Apache listening on 127.0.0.1:80 # #location ~ \.php$ { # proxy_pass http://127.0.0.1; #} # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 # #location ~ \.php$ { # root html; # fastcgi_pass 127.0.0.1:9000; # fastcgi_index index.php; # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; # include fastcgi_params; #} # deny access to .htaccess files, if Apache's document root # concurs with nginx's one # #location ~ /\.ht { # deny all; #} } # another virtual host using mix of IP-, name-, and port-based configuration # #server { # listen 8000; # listen somename:8080; # server_name somename alias another.alias; # location / { # root html; # index index.html index.htm; # } #} # HTTPS server # #server { # listen 443 ssl; # server_name localhost; # ssl_certificate cert.pem; # ssl_certificate_key cert.key; # ssl_session_cache shared:SSL:1m; # ssl_session_timeout 5m; # ssl_ciphers HIGH:!aNULL:!MD5; # ssl_prefer_server_ciphers on; # location / { # root html; # index index.html index.htm; # } #}}#user nobody;worker_processes 1;#error_log logs/error.log;#error_log logs/error.log notice;#error_log logs/error.log info;#pid logs/nginx.pid;events { worker_connections 1024;}http { include mime.types; default_type application/octet-stream; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; #access_log logs/access.log main; sendfile on; #tcp_nopush on; #keepalive_timeout 0; keepalive_timeout 65; gzip on; #一个监听服务 server {# 比如监听 80端口下服务 listen 80;# 监听地址 server_name localhost;# NGINX的proxy_redirect功能比较强大,其作用是对发送给客户端的URL进行修改。以例子说明：# server { # listen 80; # server_name localhost; # location {# proxy_pass http://10.10.10.1:9080;# }# }# 这段配置一般情况下都正常,但偶尔会出错, 错误在什么地方呢? 抓包发现服务器给客户端的跳转指令里加了端口号,如 Location: http://test.abc.com:9080/abc.html 。因为nginx服务器侦听的是80端口，所以这样的URL给了客户端,必然会出错.针对这种情况, 加一条proxy_redirect指令: proxy_redirect http://test.abc.com:9080/ / ,把所有“http://test.abc.com:9080/”的内容替换成“/”再发给客户端，就解决了。# server {# listen 80;# server_name test.abc.com;# proxy_redirect http://test.abc.com:9080/ /;# location / {# proxy_pass http://10.10.10.1:9080;# }# }# proxy_redirect http://192.168.1.85:8080/jsse/ /;# 例子，有如下匹配规则：# location = / {# #规则A# }# location = /login {# #规则B# }# location ^~ /static/ {# #规则C# }# location ~ \.(gif|jpg|png|js|css)$ {# #规则D# }# location ~* \.png$ {# #规则E# }# location !~ \.xhtml$ {# #规则F# }# location !~* \.xhtml$ {# #规则G# }# location / {# #规则H# }# 那么产生的效果如下：# 访问根目录/， 比如http://localhost/ 将匹配规则A# 访问 http://localhost/login 将匹配规则B，http://localhost/register 则匹配规则H# 访问 http://localhost/static/a.html 将匹配规则C# 访问 http://localhost/a.gif, http://localhost/b.jpg 将匹配规则D和规则E，但是规则D顺序优先，规则E不起作用，而 http://localhost/static/c.png 则优先匹配到规则C# 访问 http://localhost/a.PNG 则匹配规则E，而不会匹配规则D，因为规则E不区分大小写。# 访问 http://localhost/a.xhtml 不会匹配规则F和规则G，http://localhost/a.XHTML不会匹配规则G，因为不区分大小写。规则F，规则G属于排除法，符合匹配规则但是不会匹配到，所以想想看实际应用中哪里会用到。# 访问 http://localhost/category/id/1111 则最终匹配到规则H，因为以上规则都不匹配，这个时候应该是nginx转发请求给后端应用服务器，比如FastCGI（php），tomcat（jsp），nginx作为方向代理服务器存在。# 防盗链# location ~* \.(gif|jpg|swf)$ { # valid_referers none blocked start.igrow.cn sta.igrow.cn; # if ($invalid_referer) { # rewrite ^/ http://$host/logo.png; # }# }# 六、根据文件类型设置过期时间# location ~* \.(js|css|jpg|jpeg|gif|png|swf)$ { # if (-f $request_filename) { # expires 1h; # break; # }# }# 七、禁止访问某个目录# location ~* \.(txt|doc)${ # root /data/www/wwwroot/linuxtone/test; # deny all;# } location / {# 转发地址 proxy_pass http://localhost:8484; proxy_redirect default; proxy_set_header Host $host:$proxy_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } location /jsse/ { proxy_pass http://192.168.1.85:8080/jsse/; proxy_redirect default; proxy_set_header Host $host:$proxy_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } server { listen 8038; server_name localhost; #charset koi8-r; #access_log logs/host.access.log main; location / { root html; index index.html index.htm; } #error_page 404 /404.html; # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root html; } # proxy the PHP scripts to Apache listening on 127.0.0.1:80 # #location ~ \.php$ { # proxy_pass http://127.0.0.1; #} # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 # #location ~ \.php$ { # root html; # fastcgi_pass 127.0.0.1:9000; # fastcgi_index index.php; # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; # include fastcgi_params; #} # deny access to .htaccess files, if Apache's document root # concurs with nginx's one # #location ~ /\.ht { # deny all; #} } # another virtual host using mix of IP-, name-, and port-based configuration # #server { # listen 8000; # listen somename:8080; # server_name somename alias another.alias; # location / { # root html; # index index.html index.htm; # } #} # HTTPS server # #server { # listen 443 ssl; # server_name localhost; # ssl_certificate cert.pem; # ssl_certificate_key cert.key; # ssl_session_cache shared:SSL:1m; # ssl_session_timeout 5m; # ssl_ciphers HIGH:!aNULL:!MD5; # ssl_prefer_server_ciphers on; # location / { # root html; # index index.html index.htm; # } #}}
转载本站文章《手把手以实例叫你学习nginx配置》,
请注明出处：https://www.zhoulujun.cn/html/tools/webServer/nginx/2016_0229_7652.html