//创建系统用户nginx[root@localhost ~]# useradd -r -M -s /sbin/nologin nginx//安装依赖环境[root@localhost ~]# yum -y install pcre-devel openssl openssl-devel gd-devel gcc gcc-c++安装过程略....[root@localhost ~]# yum -y groups mark install 'Development Tools'Loaded plugins: product-id, search-disabled-repos, subscription-managerThis system is not registered with an entitlement server. You can use subscription-manager to register.There is no installed groups file.Maybe run: yum groups mark convert (see man yum)Marked install: Development Tools//创建日志存放目录[root@localhost ~]# mkdir -p /var/log/nginx[root@localhost ~]# chown -R nginx.nginx /var/log/nginx//下载nginx[root@localhost ~]# cd /usr/src/[root@localhost src]# wget http://nginx.org/download/nginx-1.12.0.tar.gz--2018-08-20 11:19:09-- http://nginx.org/download/nginx-1.12.0.tar.gzResolving nginx.org (nginx.org)... 95.211.80.227, 206.251.255.63, 2606:7100:1:69::3f, ...Connecting to nginx.org (nginx.org)|95.211.80.227|:80... connected.HTTP request sent, awaiting response... 200 OKLength: 980831 (958K) [application/octet-stream]Saving to: ‘nginx-1.12.0.tar.gz’100%[======================================================>] 980,831 15.9KB/s in 43s2018-08-20 11:19:52 (22.3 KB/s) - ‘nginx-1.12.0.tar.gz’ saved [980831/980831]//编译安装[root@localhost src]# lsdebug kernels nginx-1.12.0.tar.gz[root@localhost src]# tar xf nginx-1.12.0.tar.gz[root@localhost src]# cd nginx-1.12.0[root@localhost nginx-1.12.0]# ./configure \--prefix=/usr/local/nginx \--user=nginx \--group=nginx \--with-debug \--with-http_ssl_module \--with-http_realip_module \--with-http_image_filter_module \--with-http_gunzip_module \--with-http_gzip_static_module \--with-http_stub_status_module \--http-log-path=/var/log/nginx/access.log \--error-log-path=/var/log/nginx/error.log[root@localhost nginx-1.12.0]# make -j $(grep 'processor' /proc/cpuinfo | wc -l) && make install安装过程略....

//配置环境变量[root@localhost ~]# echo 'export PATH=/usr/local/nginx/sbin:$PATH' > /etc/profile.d/nginx.sh[root@localhost ~]# . /etc/profile.d/nginx.sh//服务控制方式，使用nginx命令-t //检查配置文件语法-v //输出nginx的版本-c //指定配置文件的路径-s //发送服务控制信号，可选值有{stop|quit|reopen|reload}//启动nginx[root@localhost ~]# nginx[root@localhost ~]# ss -antlState Recv-Q Send-Q Local Address:Port Peer Address:PortLISTEN 0 128 *:80 *:*LISTEN 0 128 *:22 *:*LISTEN 0 100 127.0.0.1:25 *:*LISTEN 0 128 :::22 :::*LISTEN 0 100 ::1:25 :::*

/usr/local/nginx/conf/nginx.conf

derective value1 [value2 ...];

user USERNAME [GROUPNAME]; //指定运行worker进程的用户和组pid /path/to/pid_file; //指定nginx守护进程的pid文件worker_rlimit_nofile number; //设置所有worker进程最大可以打开的文件数，默认为1024worker_rlimit_core size; //指明所有worker进程所能够使用的总体的最大核心文件大小，保持默认即可

location ~ \.php$ {root html;fastcgi_pass 127.0.0.1:9000; //定义反向代理fastcgi_index index.php;fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;include fastcgi_params;}

http {//协议级别include mime.types;default_type application/octet-stream;keepalive_timeout 65;gzip on;upstream {//负载均衡配置...}server {//服务器级别，每个server类似于httpd中的一个listen 80;server_name localhost;location / {//请求级别，类似于httpd中的，用于定义URL与本地文件系统的映射关系root html;index index.html index.htm;}}}

server {listen 80;server_name www.idfsoft.com;root "/vhosts/web";}

listen：指定监听的地址和端口listen address[:port];listen port;server_name NAME [...]; 后面可跟多个主机，名称可使用正则表达式或通配符当有多个server时，匹配顺序如下：先做精确匹配检查左侧通配符匹配检查，如*.idfsoft.com右侧通配符匹配检查，如mail.*正则表达式匹配检查，如~ ^.*\.idfsoft\.com$default_serverroot path; 设置资源路径映射，用于指明请求的URL所对应的资源所在的文件系统上的起始路径alias path; 用于location配置段，定义路径别名index file; 默认主页面index index.php index.html;error_page code [...] [=code] URI | @name 根据http响应状态码来指明特用的错误页面，例如 error_page 404 /404_customed.html[=code]：以指定的响应码进行响应，而不是默认的原来的响应，默认表示以新资源的响应码为其响应码，例如 error_page 404 =200 /404_customed.htmllog_format 定义日志格式log_format main '$remote_addr - $remote_user [$time_local] "$request" ''$status $body_bytes_sent "$http_referer" ''"$http_user_agent" "$http_x_forwarded_for"';access_log logs/access.log main;//注意：此处可用变量为nginx各模块内建变量location区段，通过指定模式来与客户端请求的URI相匹配//功能：允许根据用户请求的URI来匹配定义的各location，匹配到时，此请求将被相应的location配置块中的配置所处理，例如做访问控制等功能//语法：location [ 修饰符 ] pattern {......}

server {server_name www.idfsoft.com;location /abc {......}}

http://www.idfsoft.com/abchttp://www.idfsoft.com/abc?p1=11&p2=22http://www.idfsoft.com/abc/

server {server_name www.idfsoft.com;location = /abc {......}}

http://www.idfsoft.com/abchttp://www.idfsoft.com/abc?p1=11&p2=22

http://www.idfsoft.com/abc/http://www.idfsoft.com/abc/abcde

server {server_name www.idfsoft.com;location ~ ^/abc$ {......}}

http://www.idfsoft.com/abchttp://www.idfsoft.com/abc?p1=11&p2=22

http://www.idfsoft.com/abc/http://www.idfsoft.com/ABChttp://www.idfsoft.com/abcde

server {server_name www.idfsoft.com;location ~* ^/abc$ {......}}

http://www.idfsoft.com/abchttp://www.idfsoft.com/abc?p1=11&p2=22http://www.idfsoft.com/ABC

http://www.idfsoft.com/abc/http://www.idfsoft.com/abcde

allow 192.168.1.1/32 172.16.0.0/16;deny all;

auth_basic "欢迎信息";auth_basic_user_file "/path/to/user_auth_file"

server {listen 443 ssl;server_name www.idfsoft.com;ssl_certificate /etc/nginx/ssl/nginx.crt;ssl_certificate_key /etc/nginx/ssl/nginx.key;ssl_session_cache shared:SSL:1m;ssl_session_timeout 5m;ssl_ciphers HIGH:!aNULL:!MD5;ssl_prefer_server_ciphers on;location / {root html;index index.html index.htm;}}

location /status {stub_status {on | off};allow 172.16.0.0/16;deny all;}

语法：rewrite regex replacement flag;，如：rewrite ^/images/(.*\.jpg)$ /imgs/$1 break;此处的$1用于引用(.*.jpg)匹配到的内容，又如：rewrite ^/bbs/(.*)$ http://www.idfsoft.com/index.html redirect;

server段location段

变量名（变量值为空串，或者以“0”开始，则为false，其它的均为true）以变量为操作数构成的比较表达式（可使用=，!=类似的比较操作符进行测试）正则表达式的模式匹配操作~：区分大小写的模式匹配检查~*：不区分大小写的模式匹配检查!~和!~*：对上面两种测试取反测试指定路径为文件的可能性（-f，!-f)测试指定路径为目录的可能性（-d，!-d）测试文件的存在性（-e，!-e）检查文件是否有执行权限（-x，!-x）

if ($http_user_agent ~ Firefox) {rewrite ^(.*)$ /firefox/$1 break;}if ($http_user_agent ~ MSIE) {rewrite ^(.*)$ /msie/$1 break;}if ($http_user_agent ~ Chrome) {rewrite ^(.*)$ /chrome/$1 break;}

location ~* \.(jpg|gif|jpeg|png)$ {valid_referers none blocked www.idfsoft.com;if ($invalid_referer) {rewrite ^/ http://www.idfsoft.com/403.html;}}

upstream idfsoft.com {ip_hash;server 127.0.0.1:9080 weight=5;server 127.0.0.1:8080 weight=5;server 127.0.0.1:1111;}

server {  location / {    proxy_pass http://idfsoft.com;  }}