LAMP架构（nginx安装，默认虚拟主机，用户认证，域名重定向,nginx配置文件详解）

一、安装nginx[root@lnmp conf]# wget http://nginx.org/download/nginx-1.8.0.tar.gz[root@lnmp conf]# tar zxvf nginx-1.8.0.tar.gz[root@lnmp conf]# cd nginx-1.8.0[root@lnmp conf]# ./configure --prefix=/usr/local/nginx[root@lnmp conf]# make && make install[root@lnmp conf]# vim /etc/init.d/nginx#!/bin/bash# chkconfig: - 30 21# description: http service.# Source Function Library. /etc/init.d/functions# Nginx SettingsNGINX_SBIN="/usr/local/nginx/sbin/nginx"NGINX_CONF="/usr/local/nginx/conf/nginx.conf"NGINX_PID="/usr/local/nginx/logs/nginx.pid"RETVAL=0prog="Nginx"start() { echo -n $"Starting $prog: " mkdir -p /dev/shm/nginx_temp daemon $NGINX_SBIN -c $NGINX_CONF RETVAL=$? echo return $RETVAL}stop() { echo -n $"Stopping $prog: " killproc -p $NGINX_PID $NGINX_SBIN -TERM rm -rf /dev/shm/nginx_temp RETVAL=$? echo return $RETVAL}reload(){ echo -n $"Reloading $prog: " killproc -p $NGINX_PID $NGINX_SBIN -HUP RETVAL=$? echo return $RETVAL}restart(){ stop start}configtest(){ $NGINX_SBIN -c $NGINX_CONF -t return 0}case "$1" in start) start ;; stop) stop ;; reload) reload ;; restart) restart ;; configtest) configtest ;; *) echo $"Usage: $0 {start|stop|reload|restart|configtest}" RETVAL=1esacexit $RETVAL
[root@lnmp conf]# chmod 755 /etc/init.d/nginx[root@lnmp conf]# chkconfig --add nginx[root@lnmp conf]# chkconfig nginx on[root@lnmp conf]# mv nginx.conf nginx.conf.bak[root@lnmp conf]# vim /usr/local/nginx/conf/nginx.conf
user nobody nobody; （启动nginx的用户）worker_processes 2; （定义子进程）error_log /usr/local/nginx/logs/nginx_error.log crit; （错误日志）pid /usr/local/nginx/logs/nginx.pid; （pid位置）worker_rlimit_nofile 51200; （最多打开多少文件）events{ use epoll; worker_connections 6000; （进程最多多少连接）} http{ include mime.types; default_type application/octet-stream; server_names_hash_bucket_size 3526; server_names_hash_max_size 4096; log_format combined_realip '$remote_addr $http_x_forwarded_for [$time_local]' ' $host "$request_uri" $status' ' "$http_referer" "$http_user_agent"'; sendfile on; tcp_nopush on; keepalive_timeout 30; client_header_timeout 3m; client_body_timeout 3m; send_timeout 3m; connection_pool_size 256; client_header_buffer_size 1k; large_client_header_buffers 8 4k; request_pool_size 4k; output_buffers 4 32k; postpone_output 1460; client_max_body_size 10m; client_body_buffer_size 256k; client_body_temp_path /usr/local/nginx/client_body_temp; proxy_temp_path /usr/local/nginx/proxy_temp; fastcgi_temp_path /usr/local/nginx/fastcgi_temp; fastcgi_intercept_errors on; tcp_nodelay on; gzip on; gzip_min_length 1k; gzip_buffers 4 8k; gzip_comp_level 5; gzip_http_version 1.1; gzip_types text/plain application/x-javascript text/css text/htm application/xml; server （http服务） { listen 80; （监听80端口） server_name localhost; （设置域名） index index.html index.htm index.php; （设置主页） root /usr/local/nginx/html; （设置访问主目录） location ~ \.php$ （定义php解析） { include fastcgi_params; fastcgi_pass unix:/tmp/php-fcgi.sock; #fastcgi_pass 127.0.0.1:9000; （和上面一行的意思相同，只是不同的写法，监听127.0.0.1:9000） fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /usr/local/nginx/html$fastcgi_script_name; } }}
[root@lnmp conf]# /usr/local/nginx/sbin/nginx -t (检查语法错误)[root@lnmp conf]# /etc/init.d/nginx start （启动nginx）[root@lnmp conf]# netstat -lntp |grep 80 （查看80端口）[root@lnmp conf]# ps aux |grep nginx （查看nginx服务，可看到2个work子进程）
二、nginx默认虚拟主机
Nginx默认主机：
[root@lnmp ~]# vim /usr/local/nginx/conf/nginx.conf （删除server及下面的，在http最后添加）include vhost/*.conf; (指定虚拟主机目录,并读取以.conf结尾的文件）:wq退出保存[root@lnmp ~]# mkdir /usr/local/nginx/conf/vhost （创建虚拟主机目录）[root@lnmp ~]# vim aaa.com.conf （创建虚拟主机配置文件并添加以下内容：）server{ listen 80 default_server; （红色的字表示设置这个虚拟主机为默认虚拟主机） server_name aaa.com; index index.html index.htm index.php; root /data/wwwroot/default;}[root@lnmp vhost]# mkdir -p /data/wwwroot/default/ （创建虚拟主机的访问目录）[root@lnmp vhost]# echo "This is a default site." >/data/wwwroot/default/index.html （编写虚拟主机主页）[root@lnmp vhost]# /usr/local/nginx/sbin/nginx -t （检查配置文件语法错误）[root@lnmp vhost]# /usr/local/nginx/sbin/nginx -s reload （重新加载配置文件）[root@lnmp vhost]# curl localhost （curl本机，发现到达nginx的虚拟主机主页）This is a default site. ！！：还有一个需要注意的是，如果不加红色字体的字段，再找server时会根据文件名排序，比如：aaa.com.cnf和bbb.com.cnf，aaa肯定是在前，所以aaa.com.cnf是默认虚拟主机三、Nginx用户认证
nginx用户认证
用到了之前httpd的htpasswd功能。[root@lnmp ~]# vim /usr/local/nginx/conf/vhost/test.com.conf （创建一个虚拟主机）
server{ listen 80; server_name test.com; index index.html index.htm index.php; root /data/wwwroot/test.com; location / { auth_basic "Auth"; （定义用户认证的名字） auth_basic_user_file /usr/local/nginx/conf/htpasswd （定义用户名密码文件）}
}因为要使用到httpd的htpasswd功能，则需要安装httpd,可以直接yum安装，直接敲htpasswd命令，[root@lnmp ~]# htpasswd -c /usr/local/nginx/conf/htpasswd lty （c是生成用户文件，若要添加则不需要，否则会覆盖原文件）New password: Re-type new password: Adding password for user lty
检查语法错误，并且重新加载配置文件：（如果配置文件出现错误，reload不会使错误的配置文件生效）[root@lnmp ~]# /usr/local/nginx/sbin/nginx -tnginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is oknginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful[root@lnmp ~]# /usr/local/nginx/sbin/nginx -s reload
检测：[root@lnmp ~]# curl -x127.0.0.1:80 test.com -I （不加用户发现401，需要用户认证）HTTP/1.1 401 UnauthorizedServer: nginx/1.8.0Date: Thu, 14 Dec 2017 04:15:02 GMTContent-Type: text/htmlContent-Length: 194Connection: keep-aliveWWW-Authenticate: Basic realm="Auth"
[root@lnmp ~]# curl -ulty:westos -x127.0.0.1:80 test.com （-u指定用户和密码后，返回值）test.com

1.需求；访问一个目录或者文件时，才需要用户认证。实现：[root@lnmp ~]# vim /usr/local/nginx/conf/vhost/test.com.confserver{ listen 80; server_name test.com; index index.html index.htm index.php; root /data/wwwroot/test.com;
location /admin （用户认证时加上admin目录） { auth_basic "Auth"; auth_basic_user_file /usr/local/nginx/conf/htpasswd;}}检测语法错误并且重新加载配置文件：[root@lnmp ~]# /usr/local/nginx/sbin/nginx -tnginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is oknginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful[root@lnmp ~]# /usr/local/nginx/sbin/nginx -s reload
检测：[root@lnmp ~]# curl -x127.0.0.1:80 test.com （访问test.com时不需要密码也可以返回值）test.com
[root@lnmp ~]# curl -x127.0.0.1:80 test.com/admin （访问test.com下的admin时，401需要用户认证）<html><head><title>401 Authorization Required</title></head><body bgcolor="white"><center><h1>401 Authorization Required</h1></center><hr><center>nginx/1.8.0</center></body></html>

需求，访问test.com下的1.php需要用户认证，[root@lnmp ~]# vim /usr/local/nginx/conf/vhost/test.com.conf
server{ listen 80; server_name test.com; index index.html index.htm index.php; root /data/wwwroot/test.com;
location /admin/1.php （这里修改匹配到1.php） { auth_basic "Auth"; auth_basic_user_file /usr/local/nginx/conf/htpasswd;
检测语法错误并且重新加载配置文件：[root@lnmp ~]# /usr/local/nginx/sbin/nginx -tnginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is oknginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful[root@lnmp ~]# /usr/local/nginx/sbin/nginx -s reload
检测：[root@lnmp ~]# curl -x127.0.0.1:80 test.com/admin/1.php （不加用户密码访问发现401）<html><head><title>401 Authorization Required</title></head><body bgcolor="white"><center><h1>401 Authorization Required</h1></center><hr><center>nginx/1.8.0</center></body></html>[root@lnmp ~]# curl -ulty:westos -x127.0.0.1:80 test.com/admin/1.php （加用户密码访问则正常返回）touch file.php四、nginx域名重定向

httpd配置文件里server_name后面不支持写多个域名，就算写了多个，也默认识别第一个
nginx的配置文件server_name后面则支持写多个域名，[root@lnmp ~]# vim /usr/local/nginx/conf/vhost/test.com.conf
server{ listen 80; server_name test.com test1.com test2.com; （server_name后跟多个域名） index index.html index.htm index.php; root /data/wwwroot/test.com; if ($host != 'test.com' ) { （如果域名不是test.com） rewrite ^/(.*)$ http://test.com/$1 permanent; （rewrite到test.com，permanent301报错 redirect302报错）
检查语法错误并且重新加载配置文件：[root@lnmp ~]# /usr/local/nginx/sbin/nginx -tnginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is oknginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful[root@lnmp ~]# /usr/local/nginx/sbin/nginx -s reload
检测：[root@lnmp ~]# curl -x127.0.0.1:80 test1.com/admin/1.php -I （访问test1时，提示301，跳转到test.comx下）HTTP/1.1 301 Moved PermanentlyServer: nginx/1.8.0Date: Thu, 14 Dec 2017 05:03:32 GMTContent-Type: text/htmlContent-Length: 184Connection: keep-aliveLocation: http://test.com/admin/1.php [root@lnmp ~]# curl -x127.0.0.1:80 test2.com/admin/1.php -I （访问test2时，提示301，跳转到test.comx下）HTTP/1.1 301 Moved PermanentlyServer: nginx/1.8.0Date: Thu, 14 Dec 2017 05:03:38 GMTContent-Type: text/htmlContent-Length: 184Connection: keep-aliveLocation: http://test.com/admin/1.php五、Nginx配置文件详解 http://www.ha97.com/5194.html

https://my.oschina.net/duxuefeng/blog/34880