Origin

nginx 配置文件介绍

user www www; - 用户,用户组

worker_processes 8; - cpu 核心数


server {
    listen  80;
    server_name     www.dubcat.cn;
    root         /usr/local/src/xinblog/public;
    index   index.html;
    rewrite ^(.*)$ https://${server_name}$1 permanent;
}

server {

    listen 443 ssl;  
    ssl     on;
    server_name www.dubcat.cn; #填写绑定证书的域名
    ssl_certificate /usr/local/src/xinblog/Nginx/1_dubcat.cn_bundle.crt;  # 指定证书的位置,绝对路径
    ssl_certificate_key /usr/local/src/xinblog/Nginx/2_dubcat.cn.key;  # 绝对路径,同上
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
    ssl_prefer_server_ciphers on;

    root         /usr/local/src/xinblog/public;
    index   index.html index.htm;
    # Load configuration files for the default server block.
    include /etc/nginx/default.d/*.conf;


}

负载均衡配置

  • 可以配置权重和ip_hash 模式进行均衡

upstream apptest{ 
        # ip_hash;
         server localhost:9000 weight=1; 
         server localhost:9001 weight=1; 
     }
 
 server{
      listen  10086;
      server_name localhost;
      location /{
        # root html;
        # index index.html index.htm;
         proxy_pass http://apptest
      }
 }

远程代理jenkins

 location /jenkins/ {
                 proxy_pass  http://192.168.2.41:38080/jenkins/;
                 proxy_redirect off;
                 proxy_set_header Host        $host:8999;
                 proxy_set_header X-Real-IP $remote_addr;
                 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }