生产环境Nginx配置文件

<--目录-->
1）生产环境配置文件1
1）生产环境配置文件2

【生产环境配置文件1】
# cat nginx.conf
user www;
worker_processes 4;
worker_cpu_affinity 00000001 00000010 00000100 00001000; #为每个进程分配cpu，上例中将8个进程分配到8个cpu，当然可以写多个，或者将一个进程分配到多个cpu。
events {
use epoll; #使用epoll的I/O模型,（linux2.6的高性能方式）
worker_connections 65535; #每个进程允许的最多连接数
}

http
include mime.types;
default_type application/octet-stream;

charset utf-8; #默认编码GBK
server_names_hash_bucket_size 128;
client_header_buffer_size 128k; #接收header的缓冲区大小
large_client_header_buffers 4 128k; #该指令用于设置客户端请求的Header头缓冲区大小，默认值为4KB。
client_max_body_size 8m; #设置客户端能够上传的文件大小，默认为1m
client_header_timeout 3m;
client_body_timeout 3m;
send_timeout 3m;
sendfile on; #开启高效文件传输模式
tcp_nopush on;
tcp_nodelay on;
#keepalive_timeout 0;
keepalive_timeout 90; #参数的第一个值指定了客户端与服务器长连接的超时时间，超过这个时间，服务器将关闭连接。
upstream webgrp{
server 192.168.0.4:8080;
server 192.168.0.6:8080;
}
gzip on; #开启gzip压缩输出
gzip_min_length 1k; #最小压缩文件大小
gzip_buffers 4 16k; #压缩缓冲区
gzip_http_version 1.0; #压缩版本,默认1.1
gzip_comp_level 2; #压缩等级（1~9）
gzip_types text/plain application/x-javascript text/css application/xml; #压缩类型，默认就已经包含 test/html
gzip_vary on; #根据HTTP头来判断是否需要压缩
#gzip_disable "MSIE [1-6]\.(?!.*SV1)"; #IE6下对gzip的支持不好，在IE6下禁用gzip
#gzip_disable "MSIE[1-6]."; #IE6下对gzip的支持不好，在IE6下禁用gzip
gzip_disable "MSIE[1-6]."; #IE6下对gzip的支持不好，在IE6下禁用gzip

server {
listen 80;
server_name localhost;
root html;
location ~ .*\.(gif|jpg|jpeg|png|bmp|ioc|swf|raz|zip|txt|flv|mid|doc|ppt|pdf|xls|html|htm|shtml|mp3|wma|js|css)$ {
expires 7d; #7天过期
}
location /api {
rewrite ^/(.*) https://weblbs.chinacloudapp.cn/$1 permanent;
}
location / {
proxy_pass http://webgrp; proxy_redirect off;
proxy_set_header Host $host; #当后端单台web服务器上也配置多个虚拟主机时，需要使用Header来区分反向代理哪个主机名
proxy_set_header X-Real-IP $remote_addr; #后端的web服务器可以通过 X-Real-IP/X-Forward-For获取用户真实IP
proxy_set_header X-Forward-For $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_max_body_size 10m;
client_body_buffer_size 128k;
proxy_connect_timeout 90; #后端服务器连接的超时时间
proxy_send_timeout 90; #后端服务器数据回传时间
proxy_read_timeout 90; #后端服务器处理请求的时间
proxy_buffer_size 4k;
proxy_buffers 4 64k;
proxy_busy_buffers_size 128k;
proxy_temp_file_write_size 128k; #在开启缓冲后服务器响应到临时文件的功能后，设置nginx每次写数据到临时文件的大小限制
proxy_store on; #缓存读写规则
proxy_store_access user:rw group:rw all:rw; #缓存读写规则
proxy_temp_path /data1/nginx_cache/iis; #存放静态文件的缓存目录
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
server {
server_name localhost;#如果这里做了域名解析，这里就填域名
listen 443;#监听端口是443端口
root html;
ssl on;#ssl加密开启
ssl_certificate /usr/local/nginx/conf/server.crt;#存放的密钥路径
ssl_certificate_key /usr/local/nginx/conf/server.key;
location ~ .*\.(gif|jpg|jpeg|png|bmp|ioc|swf|raz|zip|txt|flv|mid|doc|ppt|pdf|xls|html|htm|shtml|mp3|wma|js|css)$ { #列出的静态文件交给nginx处理
expires 7d; #7天过期
}
location /api {
proxy_pass http://webgrp; proxy_redirect off;
proxy_set_header Host $host; #当后端单台web服务器上也配置多个虚拟主机时，需要使用Header来区分反向代理哪个主机名
proxy_set_header X-Real-IP $remote_addr; #后端的web服务器可以通过 X-Real-IP/X-Forward-For获取用户真实IP
proxy_set_header X-Forward-For $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_max_body_size 10m;
client_body_buffer_size 128k;
proxy_connect_timeout 90; #后端服务器连接的超时时间
proxy_send_timeout 90; #后端服务器数据回传时间
proxy_read_timeout 90; #后端服务器处理请求的时间
proxy_buffer_size 4k;
proxy_buffers 4 64k;
proxy_busy_buffers_size 128k;
proxy_temp_file_write_size 128k; #在开启缓冲后服务器响应到临时文件的功能后，设置nginx每次写数据到临时文件的大小限制
proxy_store on; #缓存读写规则
proxy_store_access user:rw group:rw all:rw; #缓存读写规则
proxy_temp_path /data1/nginx_cache/iis; #存放静态文件的缓存目录
}
}
}

【生产环境配置文件2】
# cat/usr/local/nginx/conf/nginx.conf
user www www;

worker_processes auto;

error_log /home/wwwlogs/nginx_error.log crit;

pid /usr/local/nginx/logs/nginx.pid;

#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 51200;

events
{
use epoll;
worker_connections 51200;
multi_accept on;
}

http
{
include mime.types;
default_type application/octet-stream;

server_names_hash_bucket_size 128;
client_header_buffer_size 32k;
large_client_header_buffers 4 32k;
client_max_body_size 50m;

sendfile on;
tcp_nopush on;

keepalive_timeout 60;

tcp_nodelay on;

fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;
fastcgi_buffer_size 64k;
fastcgi_buffers 4 64k;
fastcgi_busy_buffers_size 128k;
fastcgi_temp_file_write_size 256k;

gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_http_version 1.0;
gzip_comp_level 2;
gzip_types text/plain application/x-javascript text/css application/xml;
gzip_vary on;
gzip_proxied expired no-cache no-store private auth;
gzip_disable "MSIE [1-6]\.";

#limit_conn_zone $binary_remote_addr zone=perip:10m;
##If enable limit_conn_zone,add "limit_conn perip 10;" to server section.

server_tokens off;
#log format
log_format access '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $http_x_forwarded_for';

server
{
listen 78 default;
#listen [::]:80 default ipv6only=on;
server_name www.lnmp.org;
index index.html index.htm index.php;
root /home/wwwroot/default;

#error_page 404 /404.html;
location ~ [^/]\.php(/|$)
{
# comment try_files $uri =404; to enable pathinfo
try_files $uri =404;
fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_index index.php;
include fastcgi.conf;
#include pathinfo.conf;
}

location /nginx_status {
stub_status on;
access_log off;
}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
expires 30d;
}

location ~ .*\.(js|css)?$
{
expires 12h;
}
access_log /home/wwwlogs/access.log access;
}
include web/*.conf;
}

# cat/usr/local/nginx/conf/web/9090.conf
server {
listen 9090;
charset utf-8;
server_name admin234.mini.yaowan.com admin.mini.yaowan.com;
root /ryzc/houtai/;
# autoindex on; #无index时是否显示文件列表
index index.html index.php;
location / {
index index.php index.html index.htm;
if (!-e $request_filename) {
rewrite ^/(.*)$ /index.php/$1 last;
break;
}
}

location ~ \.php($|/) {
fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_index index.php;
include fastcgi.conf;
fastcgi_split_path_info ^(.+\.php)(.*)$;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
expires 30d;
}

location ~ .*\.(js|css)?$
{
expires 12h;
}

}

# cat /usr/local/nginx/conf/web/80.conf
server {
listen 80;
charset utf-8;
server_name _;
root /ryzc/platform/php/auth/htdocs/;
autoindex on; #无index时是否显示文件列表
index index.html index.php;

location ~ \.php$ {
fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_index index.php;
include fastcgi.conf;
}

# cat /usr/local/nginx/conf/web/8080.conf
server {
listen 8080;
autoindex off;
charset utf-8;
server_name sg.wsyht.com;
#Nginx伪静态规则

location / {
if (-f $request_filename/index.html){
rewrite (.*) $1/index.html break;
}
if (-f $request_filename/index.php){
rewrite (.*) $1/index.php;
}
if (!-f $request_filename){
rewrite (.*) /index.php;
}
}

root /ryzc/kingdom3/;
index index.html index.php;

location ~ \.php$ {
include fastcgi_params;
}

# access_log /ryzc/wwwlogs/access_80.log access;
}

#缓存网站素材
#location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|js|css)$ {
# expires 30d;
#}

#如果使用了伪静态，则可以保护这些文件的正常访问
#location ~ /(images|css|js|swf|upload)/.*$ {
#
#}

#禁止某些文件被访问
#location ~ .*\.(txt|ico)$ {
# break;
#}

#nginx 伪静态写法(一定要写在最后)
#location ~ .*$ {
# rewrite ^/(.*)$ /index.php break; #目录所有链接都指向index.php
# fastcgi_pass 127.0.0.1:9000;
# fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
# include fastcgi.conf;
#}
}