一個完整示例:
server {
listen 8080;
server_name 123.123.123.123;
root /home/myname/work/business/dist;
index index.html index.php;
access_log /var/log/nginx/access_erp.log;
error_log /var/log/nginx/error_erp.log;
client_max_body_size 8M;
client_body_buffer_size 128k;
ssl on;
ssl_certificate /etc/nginx/cert/4242434_abc.cn.pem;
ssl_certificate_key /etc/nginx/cert/532q432543_abc.cn.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location ^~ /m/ {
alias /home/myname/work/business/dist/;
try_files $uri $uri/ /index.html =404;
index index.html;
}
location /express/ {
add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
proxy_pass http://tpdoc.cn:3001/;
}
}
1.server_name:
可以是域名历等,如:abc.com宙帝;也可以是ip,如:123.123.123.123
2.listen:
監(jiān)聽端口募闲,如8080步脓;(注:阿里云上使用端口前需要在阿里云后太安全組中添加要使用的端口,之后才可以在配置中使用浩螺,否則端口不可用)
3.root:
訪問ip+端口 所指向的本機(jī)的文件夾地址靴患,如: /home/myname/work/business/dist
4.location:
配置反向代理的當(dāng)前位置,具體如下要出,一般常用的有兩種反向代理模式鸳君,如下;
1.反向代理到本機(jī)器上的文件夾中:
上面示例患蹂, 訪問http://123.123.123.123:8080/m 就會指向 /home/myname/work/business/dist/ 本機(jī)文件夾砸紊,包括文件夾下的靜態(tài)資源囱挑;如下:
location ^~ /m/ {
alias /home/myname/work/business/dist/;
try_files $uri $uri/ /index.html =404;
index index.html;
}
但是如果將前面的 ^~ 去掉平挑,就不能訪問文件夾下的靜態(tài)資源通熄,會出現(xiàn)404的問題唇辨。這是個坑赏枚,如下:
location /m/ {
alias /home/myname/work/business/dist/;
try_files $uri $uri/ /index.html =404;
index index.html;
}
2.反向代理到其他服務(wù)器上:
location /snowApi/ {
proxy_pass http://abchaha.cn:8080/;
}
5.增加接口允許跨域訪問配置
location /express/ {
add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
proxy_pass http://tpdoc.cn:3001/;
}
8.https證書配置(需先申請免費(fèi)的活購買花錢的ssl正式)
申請后會得到一個.pem后綴的文件和一個.key后綴的文件嗡贺,將這兩個文件上傳到服務(wù)器上诫睬,之后如下方ssl開頭的一些列配置那樣配置到nginx配置文件中;如:
server {
listen 8080;
server_name 123.123.123.123;
root /home/caofanghui/work/business/dist;
index index.html index.php;
access_log /var/log/nginx/access_erp.log;
error_log /var/log/nginx/error_erp.log;
client_max_body_size 8M;
client_body_buffer_size 128k;
ssl on;
ssl_certificate /etc/nginx/cert/4242434_abc.cn.pem;
ssl_certificate_key /etc/nginx/cert/532q432543_abc.cn.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location ^~ /m/ {
alias /home/myname/work/business/dist/;
try_files $uri $uri/ /index.html =404;
index index.html;
}
}
結(jié)束!