sudo apt-get install nginx

nginx -v                  
nginx version: nginx/1.18.0 (Ubuntu)

# nginx的訪問頁(yè)面(welcome to nginx)具體所在位置
vi /usr/share/nginx/html/index.html
# 訪問IP
curl 192.168.100.111
# 關(guān)閉nginx進(jìn)程
nginx -s stop
# 啟動(dòng)nginx進(jìn)程
/usr/sbin/nginx          # yum安裝的nginx也可以使用         servic nginx start
# 檢查配置文件是否有誤
nginx –t
# 重新加載配置文件
nginx –s reload
# 查看日志
tail -f filename #顯示文件默認(rèn)10行，刷新顯示
# 例：tail -f /var/log/lvs-agent.log          tail -f /etc/nginx/nginx.conf
# 查看文件后幾行
tail -n 行數(shù) 文件名 例： tail -n 100 /var/log/aa.log
# 刪除網(wǎng)卡ip
ip addr del 192.168.11.5/32 dev lo (lo eth1 eth2)
# lvs清空所有集群服務(wù)
ipvsadm –C
# 獲取eth0網(wǎng)卡上的所掛的ip值
ip a|grep eth0|grep inet|awk ‘{print $2}'|cut -d “/” -f1
# 驗(yàn)證該ip或者網(wǎng)址是否通 可用返回200
curl -I -m 10 -o /dev/null -s -w %{http_code} 10.110.26.10:8080
# 后臺(tái)啟動(dòng)jar包
nohup java -jar /usr/sbin/項(xiàng)目名.jar >>/var/log/項(xiàng)目名.log 2>&1 &
# 查看上一個(gè)命令是否執(zhí)行成功 返回0執(zhí)行成功 其他不成
echo $?
# 查看nginx進(jìn)程是否啟動(dòng)。此命令用在代碼判斷nginx進(jìn)程是否啟動(dòng)，如果只用ps aux | grep nginx 即使沒有啟動(dòng)也會(huì)用內(nèi)容返回，影響判斷
ps aux | grep nginx | greo –v grep

# nginx.conf
# 全局配置區(qū)
user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
# 網(wǎng)絡(luò)事件配置區(qū)
events {
	worker_connections 768;
	# multi_accept on;
}
# HTTP模塊
http {
	##
	# HTTP 全局設(shè)置
	##
	sendfile on;
	tcp_nopush on;
	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 2048;
	# server_tokens off;
	# server_names_hash_bucket_size 64;
	# server_name_in_redirect off;
	include /etc/nginx/mime.types;
	default_type application/octet-stream;
	##
	# SSL 設(shè)置
	##
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
	ssl_prefer_server_ciphers on;
	##
	# 日志設(shè)置
	##
	access_log /var/log/nginx/access.log;
	error_log /var/log/nginx/error.log;
	##
	# 資源壓縮設(shè)置
	##
	gzip on;	# 默認(rèn)開啟
	# gzip_vary on;
	# gzip_proxied any;
	# gzip_comp_level 6;
	# gzip_buffers 16 8k;
	# gzip_http_version 1.1;
	# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
	##
	# 虛擬主機(jī)配置
	##
	include /etc/nginx/conf.d/*.conf;
	include /etc/nginx/sites-enabled/*;
}

server {	# 虛擬主機(jī)配置
	listen 80 default_server;	# 監(jiān)聽端口
	listen [::]:80 default_server;
	# SSL 配置
	#
	# listen 443 ssl default_server;
	# listen [::]:443 ssl default_server;
	#
	# Note: You should disable gzip for SSL traffic.
	# See: https://bugs.debian.org/773332
	#
	# Read up on ssl_ciphers to ensure a secure configuration.
	# See: https://bugs.debian.org/765782
	#
	# Self signed certs generated by the ssl-cert package
	# Don't use them in a production server!
	#
	# include snippets/snakeoil.conf;	
	# 數(shù)據(jù)緩存位置
	root /var/www/html;
	# Add index.php to the list if you are using PHP
	index index.html index.htm index.nginx-debian.html;	
	# 域名，可以有多個(gè)
	server_name _;	
	# 對(duì)/進(jìn)行反向代理
	location / {
		# First attempt to serve request as file, then
		# as directory, then fall back to displaying a 404.
		# uwsgi_pass 127.0.0.1:8000;
		# include /etc/nginx/uwsgi_params;
		try_files $uri $uri/ =404;
	}
	# pass PHP scripts to FastCGI server
	#
	#location ~ \.php$ {
	#	include snippets/fastcgi-php.conf;
	#
	#	# With php-fpm (or other unix sockets):
	#	fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
	#	# With php-cgi (or other tcp sockets):
	#	fastcgi_pass 127.0.0.1:9000;
	#}
	# deny access to .htaccess files, if Apache's document root
	# concurs with nginx's one
	#
	#location ~ /\.ht {
	#	deny all;
	#}
}

# 反向代理默認(rèn)是關(guān)閉的
# upstream localhost是第三方模塊，均衡
upstream localhost {
	# 實(shí)際服務(wù)器
	server 192.168.136.133:8081;
	server 192.168.136.133:8081;
	server 192.168.136.133:8081;
} 
# 負(fù)載
server {
	listen 80	# 代理服務(wù)器的端口
	server_name localhost;
	location / {
		proxy_pass http://localhost;	# 將請(qǐng)求發(fā)送給其中一臺(tái)實(shí)際服務(wù)器
	}
}

server {	# 虛擬主機(jī)配置
	listen 80 default_server;	# 監(jiān)聽端口
	listen [::]:80 default_server;
	
	# 數(shù)據(jù)緩存位置
	root /var/www/html;

	# Add index.php to the list if you are using PHP
	index index.html index.htm index.nginx-debian.html;
	
	# 域名，可以有多個(gè)
	server_name _;
	
	# 對(duì)/進(jìn)行反向代理
	location / {
		# First attempt to serve request as file, then
		# as directory, then fall back to displaying a 404.
		# uwsgi_pass 127.0.0.1:8000;
		# include /etc/nginx/uwsgi_params;
		try_files $uri $uri/ =404;
	}
	# 如果是這些文件后綴就去這里面找
	location ~ .*\.(html|htm|gif|jpg|jpeg|bmp|png|ico|txt|js|css) $ {
		root /static;
		expires 30d;	# 緩存有效期
	}
}

og_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
$remote_addr：客戶端的ip地址(代理服務(wù)器，顯示代理服務(wù)ip)
$remote_user：用于記錄遠(yuǎn)程客戶端的用戶名稱（一般為“-”）
$time_local：用于記錄訪問時(shí)間和時(shí)區(qū)
$request：用于記錄請(qǐng)求的url以及請(qǐng)求方法
$status：響應(yīng)狀態(tài)碼，例如：200成功、404頁(yè)面找不到等。
$body_bytes_sent：給客戶端發(fā)送的文件主體內(nèi)容字節(jié)數(shù)

yum install http-tools -y

http {
	# binary_remote_addr:IP
	# zone=one:10m;申請(qǐng)一塊10M的空間存放連接的IP
	limit_conn_zone $binary_remote_addr zone=one:10m;
	
	server {
		# zone區(qū)域中每次放出10個(gè)連接nginx處理
		limit_conn one 10;
	}
}

http {
	# rate意思是每個(gè)連接每秒能發(fā)一個(gè)連接
	limit_req_zone $binary_remote_addr zone=req_one:10m rate=1r/s;
	
	server {
		# brust:令牌，每次新增一個(gè)，120個(gè)發(fā)完后會(huì)報(bào)錯(cuò)503
		limit_req zone=req_one brust=120;
	}
}

server {
	# max_conns最大接收服務(wù)數(shù)量
	server 127.0.0.1:8080 max_conns=100;
}

http {
	server_tokens off;
}

http {
	location / {
		allow 127.0.0.1;	# 白名單
		deny all;	# 黑名單
	}
}

http {
	location /logs{
		autoindex on;	# 展示目錄
		root /static;
	}
	location ^/logs~*\.(log|txt)$ {
		add_header Content_Type text/plain;
		root /static;
	}
}

http {
	# SSL settings
}

worker_processes 2;# 調(diào)整與CPU一致
events {
	# 每個(gè)worker最大并發(fā)數(shù)量
	worker_connection 65535;
}

events {
	# keepalive超時(shí)時(shí)間，默認(rèn)是60s，切記這個(gè)參數(shù)也不能設(shè)置過大！否則會(huì)導(dǎo)致許多無效的http連接占據(jù)著nginx的連接數(shù)，終nginx崩潰！
	keepalive_timeout 60;
}
http {
	keepalive_timeout 60;
}

http {
    #gzip模塊設(shè)置
    #開啟壓縮
    gzip on;
    # 設(shè)置允許壓縮的頁(yè)面最小字節(jié)數(shù)，頁(yè)面字節(jié)數(shù)從header頭得content-length中進(jìn)行獲取。
    默認(rèn)值是0，不管頁(yè)面多大都?jí)嚎s。建議設(shè)置成大于2k的字節(jié)數(shù)，小于2k可能會(huì)越壓越大。
    gzip_min_length 2k;
    # 設(shè)置系統(tǒng)獲取幾個(gè)單位的緩存用于存儲(chǔ)gzip的壓縮結(jié)果數(shù)據(jù)流。 例如 4 4k 代表以4k為單
    位，按照原始數(shù)據(jù)大小以4k為單位的4倍申請(qǐng)內(nèi)存。 4 8k 代表以8k為單位，按照原始數(shù)據(jù)大小以8k
    為單位的4倍申請(qǐng)內(nèi)存。
    # 如果沒有設(shè)置，默認(rèn)值是申請(qǐng)跟原始數(shù)據(jù)相同大小的內(nèi)存空間去存儲(chǔ)gzip壓縮結(jié)果。
    gzip_buffers 4 16k;
    #壓縮級(jí)別，1-10，數(shù)字越大壓縮的越好，也越占用CPU時(shí)間
    gzip_comp_level 5;
    # 默認(rèn)值: gzip_types text/html (默認(rèn)不對(duì)js/css文件進(jìn)行壓縮)
    # 壓縮類型，匹配MIME類型進(jìn)行壓縮
    # 不能用通配符 text/*
    # (無論是否指定)text/html默認(rèn)已經(jīng)壓縮
    # 設(shè)置哪壓縮種文本文件可參考 conf/mime.types
    gzip_types text/plain application/xjavascript text/css application/xml;
    # 值為1.0和1.1 代表是否壓縮http協(xié)議1.0，選擇1.0則1.0和1.1都可以壓縮
    gzip_http_version 1.0
    # IE6及以下禁止壓縮
    gzip_disable "MSIE [1-6]\.";
    # 默認(rèn)值：off
    # Nginx作為反向代理的時(shí)候啟用，開啟或者關(guān)閉后端服務(wù)器返回的結(jié)果，匹配的前提是后端服
    務(wù)器必須要返回包含"Via"的 header頭。
    # off - 關(guān)閉所有的代理結(jié)果數(shù)據(jù)的壓縮
    # expired - 啟用壓縮，如果header頭中包含 "Expires" 頭信息
    # no-cache - 啟用壓縮，如果header頭中包含 "Cache-Control:no-cache" 頭信息
    # no-store - 啟用壓縮，如果header頭中包含 "Cache-Control:no-store" 頭信息
    # private - 啟用壓縮，如果header頭中包含 "Cache-Control:private" 頭信息
    # no_last_modified - 啟用壓縮,如果header頭中不包含 "Last-Modified" 頭信息
    # no_etag - 啟用壓縮 ,如果header頭中不包含 "ETag" 頭信息
    # auth - 啟用壓縮 , 如果header頭中包含 "Authorization" 頭信息
    # any - 無條件啟用壓縮
        gzip_proxied expired no-cache no-store private auth;
    # 給CDN和代理服務(wù)器使用，針對(duì)相同url，可以根據(jù)頭信息返回壓縮和非壓縮副本
    gzip_vary on
}

server {
	location /NginxStatus {
		stub_status on;
		access_log off;
	}
}

./configure --prefix=... --with-http_stub_status _module