## 前因
关于Nginx部署、配置的文章网上已经发布过很多,包括我自己也私藏了不少还发布过两篇:
* [后端必备 Nginx 配置](https://juejin.im/post/5d7e3f51f265da03a31d687b)
* [前端必备 Nginx 配置](https://juejin.im/post/5d7e49c8f265da03ce3a0884)
整理出来为的就是需要的时候,复制、粘贴就能使用。
然而千奇百怪的实际开发中,你肯定需要增删Nginx配置。你就得上网搜一下,复制粘贴出bug了又得调一下...
搞定还得保存下来以备后患。多了不好找还得整理...就搞得很麻烦
## 后果
今天我给大家推荐一款"Nginx配置利器",配配变量就能一键生成常用配置。和繁琐低效配置说再见👋
![](https://user-gold-cdn.xitu.io/2019/11/1/16e24cde2b3173a9?imageView2/0/w/1280/h/960/format/webp/ignore-error/1)
网站链接:
* [nginxconfig 在线配置网站](https://nginxconfig.io/)
* [nginxconfig github项目](https://github.com/digitalocean/nginxconfig.io)
nginxconfig 目前支持:
* Angular、React、Vue、Node.js
* PHP、Python
* wordpress、Magento、Drupal
* 缓存、Https、日志等各种配置...
## 使用
实现用户访问`*.myweb.com`域名自动跳转到`myweb.com`配置,并且开启http强制跳转到https的配置。
![图片描述](https://user-gold-cdn.xitu.io/2019/11/1/16e248eba45765d3?imageView2/0/w/1280/h/960/format/webp/ignore-error/1)
![图片描述](https://user-gold-cdn.xitu.io/2019/11/1/16e248eb729f41cc?imageView2/0/w/1280/h/960/format/webp/ignore-error/1)
配置完之后,下方还有`安装步骤`指导你配置生效。交互体验相当好
![图片描述](https://user-gold-cdn.xitu.io/2019/11/1/16e248eb75098d95?imageView2/0/w/1280/h/960/format/webp/ignore-error/1)
生成配置`/etc/nginx/sites-available/myweb.com.conf`如下:
~~~
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name myweb.com;
root /var/www/myweb.com/public;
# SSL
ssl_certificate /etc/letsencrypt/live/myweb.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/myweb.com/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/myweb.com/chain.pem;
# security
include nginxconfig.io/security.conf;
# index.html fallback
location / {
try_files $uri $uri/ /index.html;
}
# additional config
include nginxconfig.io/general.conf;
}
# subdomains redirect
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name *.myweb.com;
# SSL
ssl_certificate /etc/letsencrypt/live/myweb.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/myweb.com/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/myweb.com/chain.pem;
return 301 https://myweb.com$request_uri;
}
# HTTP redirect
server {
listen 80;
listen [::]:80;
server_name .myweb.com;
include nginxconfig.io/letsencrypt.conf;
location / {
return 301 https://myweb.com$request_uri;
}
}
复制代码
~~~
* * *
网站下方还罗列了推荐的nginx配置、安全配置...以作参考
/etc/nginx/nginx.conf
~~~
# Generated by nginxconfig.io
# https://nginxconfig.io/?0.domain=myweb.com&0.php=false&0.index=index.html&0.fallback_html
user www-data;
pid /run/nginx.pid;
worker_processes auto;
worker_rlimit_nofile 65535;
events {
multi_accept on;
worker_connections 65535;
}
http {
charset utf-8;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
server_tokens off;
log_not_found off;
types_hash_max_size 2048;
client_max_body_size 16M;
# MIME
include mime.types;
default_type application/octet-stream;
# logging
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log warn;
# SSL
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:10m;
ssl_session_tickets off;
# Diffie-Hellman parameter for DHE ciphersuites
ssl_dhparam /etc/nginx/dhparam.pem;
# Mozilla Intermediate configuration
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
# OCSP Stapling
ssl_stapling on;
ssl_stapling_verify on;
resolver 1.1.1.1 1.0.0.1 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=60s;
resolver_timeout 2s;
# load configs
include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
}
复制代码
~~~
/etc/nginx/nginxconfig.io/security.conf
~~~
# security headers
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# . files
location ~ /\.(?!well-known) {
deny all;
}
复制代码
~~~
## 拓展
以上就满足日常开发需求啦。如果你压抑不住,想要展示你的高端操作。
你可以加入到项目本身开发中;nginxconfig项目本身是`MIT`开源协议,你也可以在此基础上迭代出自己的版本
- 简介
- 【入门】并发特性
- 【入门】安装启动
- 【入门】基础必会
- 【基础】正向代理
- 【基础】反向代理
- 【基础】动静分离
- 【基础】负载均衡
- 【基础】HTTP服务器
- 【应用】配置一键生成
- 【应用】乱码处理
- 【应用】开启目录浏览功能
- 【应用】错误码原因和解决方案
- 【应用】location用法
- 【应用】常用正则
- 【应用】rewrite
- 【应用】全局变量
- 【应用】if用法
- 【应用】配置https
- 【应用】PHP-fastcgi
- 【应用】flag标志位
- 【应用】过期功能
- 【应用】gzip压缩
- 【应用】会话保持
- 【应用】worker最大打开文件数
- 【应用】sendfile传输文件
- 【应用】单进程最大连接数
- 【应用】事件驱动
- 【应用】隐藏版本号
- 【应用】网络连接优化
- 【应用】缓存机制
- 【应用】网络限流
- 【应用】日志配置
- 【应用】灰度发布
- 【关于】作者