{"id":841,"date":"2021-08-31T00:15:48","date_gmt":"2021-08-30T16:15:48","guid":{"rendered":"https:\/\/www.dd-home.top\/?p=841"},"modified":"2021-08-31T00:18:57","modified_gmt":"2021-08-30T16:18:57","slug":"nginx-config-%e9%85%8d%e7%bd%ae%e6%96%87%e4%bb%b6","status":"publish","type":"post","link":"https:\/\/www.dd-home.top\/?p=841","title":{"rendered":"Nginx config \u914d\u7f6e\u6587\u4ef6"},"content":{"rendered":"<h4><\/h4>\n<p><!--more--><\/p>\n<h4 class=\"md-end-block md-heading md-focus\"><span class=\"md-plain md-expand\">1\u3001\u67e5\u770b\u5f53\u524dcentos\u7684cpu \u4fe1\u606f\u53ca\u5185\u5b58\u4fe1\u606f<\/span><\/h4>\n<pre class=\"md-fences md-end-block ty-contain-cm modeLoaded\" lang=\"shell\" spellcheck=\"false\"><span role=\"presentation\"><span class=\"cm-comment\"># \u603b\u6838\u6570 = \u7269\u7406CPU\u4e2a\u6570 X \u6bcf\u9897\u7269\u7406CPU\u7684\u6838\u6570 <\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># \u603b\u903b\u8f91CPU\u6570 = \u7269\u7406CPU\u4e2a\u6570 X \u6bcf\u9897\u7269\u7406CPU\u7684\u6838\u6570 X \u8d85\u7ebf\u7a0b\u6570<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># \u67e5\u770bCPU \u4fe1\u606f<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-builtin\">cat<\/span> \/proc\/cpuinfo |grep <span class=\"cm-string\">\"name\"<\/span> |cut <span class=\"cm-attribute\">-f2<\/span> <span class=\"cm-attribute\">-d<\/span>: |uniq <span class=\"cm-attribute\">-c<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># \u67e5\u770bCPU \u6838\u5fc3\u4fe1\u606f<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-builtin\">cat<\/span> \/proc\/cpuinfo | <span class=\"cm-builtin\">grep<\/span> <span class=\"cm-string\">\"physical\"<\/span>| <span class=\"cm-builtin\">sort<\/span> |uniq <span class=\"cm-attribute\">-c<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\">getconf LONG_BIT<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-builtin\">cat<\/span> \/proc\/cpuinfo<\/span>\r\n<span role=\"presentation\">\u200b<\/span><\/pre>\n<h4 class=\"md-end-block md-heading\"><span class=\"md-plain\">2\u3001nginx CPU\u4f18\u5316<\/span><\/h4>\n<pre class=\"md-fences md-end-block ty-contain-cm modeLoaded\" lang=\"nginx\" spellcheck=\"false\"><span role=\"presentation\"><span class=\"cm-comment\"># \u56db\u6838worker\u914d\u7f6e<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-keyword\">worker_processes<\/span>  4;<\/span>\r\n<span role=\"presentation\"><span class=\"cm-keyword\">worker_cpu_affinity<\/span> <span class=\"cm-tag\">0001 0010<\/span> <span class=\"cm-tag\">0100 1000<\/span>;<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># \u516b\u6838worker\u914d\u7f6e<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-keyword\">worker_processes<\/span> 8;<\/span>\r\n<span role=\"presentation\"><span class=\"cm-keyword\">worker_cpu_affinity<\/span> <span class=\"cm-tag\">00000001 00000010<\/span> <span class=\"cm-tag\">00000100 00001000<\/span> <span class=\"cm-tag\">00010000 00100000<\/span> <span class=\"cm-tag\">01000000 1000000<\/span>;<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-keyword\">worker_rlimit_nofile<\/span> 65535;<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-variable-2\">events<\/span> {<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">use<\/span> epoll;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">worker_connections<\/span> 65535;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">multi_accept<\/span> on;<\/span>\r\n<span role=\"presentation\">}<\/span><\/pre>\n<pre class=\"md-fences md-end-block ty-contain-cm modeLoaded\" lang=\"nginx\" spellcheck=\"false\"><span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\">#user  nobody;<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># <\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-keyword\">worker_processes<\/span>  1;<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># \u56db\u6838worker\u914d\u7f6e<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># worker_processes  4;<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># worker_cpu_affinity 0001 0010 0100 1000;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># \u516b\u6838worker\u914d\u7f6e<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># worker_processes 8;<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\"># worker_cpu_affinity 00000001 00000010 00000100 00001000 00010000 00100000 01000000 1000000;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\">#error_log  logs\/error.log;<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\">#error_log  logs\/error.log  notice;<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\">#error_log  logs\/error.log  info;<\/span><\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\">#error_log  \"pipe:rollback logs\/error_log interval=1d baknum=7 maxsize=2G\";<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-comment\">#pid \u00a0 \u00a0 \u00a0  logs\/nginx.pid;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-keyword\">worker_rlimit_nofile<\/span> 65535;<\/span>\r\n<span role=\"presentation\"><span class=\"cm-variable-2\">events<\/span> {<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">use<\/span> epoll;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">worker_connections<\/span> 65535;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">multi_accept<\/span> on;<\/span>\r\n<span role=\"presentation\">}<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"><span class=\"cm-variable-2\">http<\/span> {<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u9690\u85cf\u7248\u672c\u53f7<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">server_tokens<\/span> off;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-string-2\">include<\/span> \u00a0 \u00a0 \u00a0 mime.<span class=\"cm-variable-2\">types<\/span>;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">default_type<\/span>  application\/<span class=\"cm-number\">octet-stream<\/span>;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-variable-2\">map<\/span> <span class=\"cm-number\">$http_upgrade $connection_upgrade <\/span>{<\/span>\r\n<span role=\"presentation\"> \u00a0      <span class=\"cm-variable\">default upgrade<\/span>;<\/span>\r\n<span role=\"presentation\"> \u00a0      <span class=\"cm-string\">''<\/span> \u00a0 close;<\/span>\r\n<span role=\"presentation\"> \u00a0  }<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#log_format  main  '$remote_addr - $remote_user [$time_local] \"$request\" '<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0  '$status $body_bytes_sent \"$http_referer\" '<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0  '\"$http_user_agent\" \"$http_x_forwarded_for\"';<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#access_log  logs\/access.log  main;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#access_log  \"pipe:rollback logs\/access_log interval=1d baknum=7 maxsize=2G\"  main;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">sendfile<\/span> \u00a0 \u00a0 \u00a0  on;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#tcp_nopush \u00a0 \u00a0 on;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#keepalive_timeout  0;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">keepalive_timeout<\/span>  65;<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#gzip  on;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># X-Frame-Options \u9632frame\u5d4c\u5165<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">add_header<\/span> <span class=\"cm-number\">X-Frame-Options<\/span> SAMEORIGIN;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># X-XSS-Protection<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">add_header<\/span> <span class=\"cm-number\">X-Xss-Protection<\/span> <span class=\"cm-string\">\"1; mode=block\"<\/span>;<\/span>\r\n<span role=\"presentation\">    <span class=\"cm-comment\"># \u7981\u7528\u4e86\u5ba2\u6237\u7aef\u7684 MIME \u7c7b\u578b\u55c5\u63a2\u884c\u4e3a<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-keyword\">add_header<\/span> <span class=\"cm-number\">X-Content-Type-Options<\/span> nosniff;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-variable-2\">server<\/span> {<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-string-2\">listen<\/span> \u00a0 \u00a0 \u00a0 80;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-string-2\">server_name<\/span>  localhost;<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#charset koi8-r;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#access_log  logs\/host.access.log  main;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#access_log  \"pipe:rollback logs\/host.access_log interval=1d baknum=7 maxsize=2G\"  main;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-variable-2\">location<\/span> \/ {<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-string-2\">root<\/span> \u00a0 html;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-keyword\">index<\/span> \u00a0<span class=\"cm-keyword\">index<\/span>.<span class=\"cm-number\">html index<\/span>.htm;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0  }<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#error_page  404 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0  \/404.html;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># redirect server error pages to the static page \/50x.html<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-variable\">error_page <\/span>\u00a0 <span class=\"cm-number\">500 502<\/span> <span class=\"cm-number\">503 504<\/span>  \/50x.html;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-variable-2\">location<\/span> = \/50x.<span class=\"cm-number\">html <\/span>{<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-string-2\">root<\/span> \u00a0 html;<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0  }<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># proxy the PHP scripts to Apache listening on 127.0.0.1:80<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#location ~ \\.php$ {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  proxy_pass \u00a0 http:\/\/127.0.0.1;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#location ~ \\.php$ {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  root \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 html;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  fastcgi_pass \u00a0 127.0.0.1:9000;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  fastcgi_index  index.php;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  fastcgi_param  SCRIPT_FILENAME  \/scripts$fastcgi_script_name;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  include \u00a0 \u00a0 \u00a0  fastcgi_params;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># pass the Dubbo rpc to Dubbo provider server listening on 127.0.0.1:20880<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#location \/dubbo {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  dubbo_pass_all_headers on;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  dubbo_pass_set args $args;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  dubbo_pass_set uri $uri;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  dubbo_pass_set method $request_method;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  dubbo_pass org.apache.dubbo.samples.tengine.DemoService 0.0.0 tengineDubbo dubbo_backend;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># deny access to .htaccess files, if Apache's document root<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># concurs with nginx's one<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#location ~ \/\\.ht {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  deny  all;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0  }<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#server {<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#listen 443 ssl;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#charset utf-8;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#\u914d\u7f6eHTTPS\u7684\u9ed8\u8ba4\u8bbf\u95ee\u7aef\u53e3\u4e3a443\u3002<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#\u5982\u679c\u672a\u5728\u6b64\u5904\u914d\u7f6eHTTPS\u7684\u9ed8\u8ba4\u8bbf\u95ee\u7aef\u53e3\uff0c\u53ef\u80fd\u4f1a\u9020\u6210Nginx\u65e0\u6cd5\u542f\u52a8\u3002<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#\u5982\u679c\u60a8\u4f7f\u7528Nginx 1.15.0\u53ca\u4ee5\u4e0a\u7248\u672c\uff0c\u8bf7\u4f7f\u7528listen 443 ssl\u4ee3\u66fflisten 443\u548cssl on\u3002<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#server_name xxxxxx.xxx.xxx; #\u9700\u8981\u5c06yourdomain.com\u66ff\u6362\u6210\u8bc1\u4e66\u7ed1\u5b9a\u7684\u57df\u540d\u3002<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#add_header Strict-Transport-Security \"max-age=63072000; includeSubdomains\" always;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#ssl_certificate cert\/xxx.pem;  #\u9700\u8981\u5c06cert-file-name.pem\u66ff\u6362\u6210\u5df2\u4e0a\u4f20\u7684\u8bc1\u4e66\u6587\u4ef6\u7684\u540d\u79f0\u3002<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#ssl_certificate_key cert\/xxx.key; #\u9700\u8981\u5c06cert-file-name.key\u66ff\u6362\u6210\u5df2\u4e0a\u4f20\u7684\u8bc1\u4e66\u5bc6\u94a5\u6587\u4ef6\u7684\u540d\u79f0\u3002<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#ssl_session_timeout 5m;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#\u8868\u793a\u4f7f\u7528\u7684\u52a0\u5bc6\u5957\u4ef6\u7684\u7c7b\u578b\u3002<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #\u8868\u793a\u4f7f\u7528\u7684TLS\u534f\u8bae\u7684\u7c7b\u578b\u3002<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#ssl_prefer_server_ciphers on;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#location \/a\/ {<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#proxy_pass https:\/\/xxx.xxx.xxx.xxx:443\/a\/;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#proxy_set_header Host \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0  $host:$server_port;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0      <span class=\"cm-comment\">#proxy_set_header X-Forwarded-For \u00a0 \u00a0 $proxy_add_x_forwarded_for;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#proxy_set_header X-Forwarded-Proto \u00a0 $scheme;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#proxy_set_header X-Forwarded-Port \u00a0  $server_port;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0<span class=\"cm-comment\">#location \/ {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 <span class=\"cm-comment\">#proxy_pass https:\/\/xxx.xxx.xxx.xxx:443\/;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0 \u00a0 <span class=\"cm-comment\">#proxy_set_header Host $http_host;<\/span><\/span>\r\n<span role=\"presentation\">     \u00a0 \u00a0 \u00a0 <span class=\"cm-comment\">#proxy_read_timeout 60s;<\/span><\/span>\r\n<span role=\"presentation\">         \u00a0 <span class=\"cm-comment\">#proxy_set_header X-Real_IP $remote_addr;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#proxy_set_header X-Forwarded-for $remote_addr;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0       \u00a0 \u00a0<span class=\"cm-comment\">#proxy_http_version 1.1;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0          <span class=\"cm-comment\">#proxy_set_header Upgrade $http_upgrade;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0          <span class=\"cm-comment\">#proxy_set_header Connection 'Upgrade';<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">        <span class=\"cm-comment\">#error_page \u00a0 404 403  \/40x.html;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#location = \/40x.html {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#root \u00a0 html;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0 \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">    <span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># upstream for Dubbo rpc to Dubbo provider server listening on 127.0.0.1:20880<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#upstream dubbo_backend {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  multi 1;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  server 127.0.0.1:20880;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># another virtual host using mix of IP-, name-, and port-based configuration<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#server {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  listen \u00a0 \u00a0 \u00a0 8000;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  listen \u00a0 \u00a0 \u00a0 somename:8080;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  server_name  somename  alias  another.alias;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  location \/ {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0 \u00a0 \u00a0  root \u00a0 html;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0 \u00a0 \u00a0  index  index.html index.htm;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  }<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># HTTPS server<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#server {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  listen \u00a0 \u00a0 \u00a0 443 ssl;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  server_name  localhost;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  add_header Strict-Transport-Security \"max-age=63072000; includeSubdomains\" always;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  ssl_certificate \u00a0 \u00a0  cert.pem;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  ssl_certificate_key  cert.key;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  ssl_session_cache \u00a0  shared:SSL:1m;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  ssl_session_timeout  5m;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  ssl_ciphers  HIGH:!aNULL:!MD5;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  ssl_prefer_server_ciphers  on;<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  location \/ {<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0 \u00a0 \u00a0  root \u00a0 html;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0 \u00a0 \u00a0  index  index.html index.htm;<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\"># \u00a0  }<\/span><\/span>\r\n<span role=\"presentation\"> \u00a0 \u00a0<span class=\"cm-comment\">#}<\/span><\/span>\r\n<span role=\"presentation\">\u200b<\/span>\r\n<span role=\"presentation\">}<\/span>\r\n<span role=\"presentation\">\u200b<\/span><\/pre>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,6],"tags":[66],"class_list":["post-841","post","type-post","status-publish","format-standard","hentry","category-5","category-6","tag-nginx"],"_links":{"self":[{"href":"https:\/\/www.dd-home.top\/index.php?rest_route=\/wp\/v2\/posts\/841","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dd-home.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dd-home.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dd-home.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dd-home.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=841"}],"version-history":[{"count":2,"href":"https:\/\/www.dd-home.top\/index.php?rest_route=\/wp\/v2\/posts\/841\/revisions"}],"predecessor-version":[{"id":844,"href":"https:\/\/www.dd-home.top\/index.php?rest_route=\/wp\/v2\/posts\/841\/revisions\/844"}],"wp:attachment":[{"href":"https:\/\/www.dd-home.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=841"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dd-home.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=841"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dd-home.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=841"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}