lnmp 1.3基礎(chǔ)
創(chuàng)建緩存目錄
mkdir /home/cache/path -p
mkdir /home/cache/temp
chmod 777 -R /home/cache
配置nginx conf文件
vi /usr/local/nginx/conf/nginx.conf
proxy_connect_timeout 5;
proxy_read_timeout 60;
proxy_send_timeout? 5;
proxy_buffer_size 16k;
proxy_buffers? 4 64k;
proxy_busy_buffers_size 128k;
proxy_temp_file_write_size 128k;
proxy_temp_path /home/cache/temp;
#臨時文件目錄
proxy_cache_path /home/cache/path levels=1:2 keys_zone=cache_one:5m inactive=7d max_size=1g;
#5m為內(nèi)存占用,1g為最大硬盤占用,cache_one為緩存區(qū)名稱,如果需要修改對應(yīng)修改。
看看nginx有沒有報錯
/usr/local/nginx/sbin/nginx -t
因為是443端口的,所以把證書什么copy過來。自己放目錄
# vi/usr/local/nginx/conf/vhost/XXX.com.conf
server
{
listen 443;
#listen [::]:80;
server_name XX.com www.XXX.com;
ssl on;
ssl_certificate /usr/local/nginx/conf/vhost/ssl/XXX_com.Certificate.crt;
ssl_certificate_key /usr/local/nginx/conf/vhost/ssl/XX.key;
ssl_protocols TLSv1.2 TLSv1.1 TLSv1; # 支持的協(xié)議,Windows XP 不支持
ssl_prefer_server_ciphers on; # 啟用 Forward Secrecy
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
keepalive_timeout 70;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
index index.php;
access_log off;
location / {
proxy_cache_key "$scheme://$host$request_uri";
#緩存key規(guī)則,用于自動清除緩存。
proxy_cache cache_one;
#緩存區(qū)名稱,與前面定義的相同
proxy_cache_valid 200 304 3h;
proxy_cache_valid 301 3d;
proxy_cache_valid any 10s;
#200 304狀態(tài)緩存3小時
#301狀態(tài)緩存3天
#其他狀態(tài)緩存(如502 404)10秒
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#向后端傳遞訪客ip
proxy_set_header Referer https://XXX.com;
#強(qiáng)制定義Referer,程序驗證判斷會用到
proxy_set_header Host $host;
#定義主機(jī)頭
proxy_pass https://139.162.**;
#指定后端ip,可以加端口
#proxy_cache_use_stale invalid_header error timeout http_502;
#當(dāng)后端出現(xiàn)錯誤、超時、502狀態(tài)時啟用過期緩存,慎用。
}
}
server {
listen 80;
# listen [::]:80; # 如果您需要同時偵聽 IPv6,請取消此行注釋
server_name XXX.com www.XXX.com *.XXX.com; # 您的域名
location / {
return 301 https://XXX.com$request_uri; # 要重定向的地址,請將 example.com 改為您的域名
}
}