nginx使用小结

mdfind -name nginx.conf

which nginx

whereis nginx

nginx -v

nginx version: nginx/1.21.3 built by clang 11.0.0 (clang-1100.0.33.17) built with OpenSSL 1.1.1l  24 Aug 2021 TLS SNI support enabled configure arguments:
# nginx 安装路径，和root的默认地址
--prefix=/usr/local/Cellar/nginx/1.21.3
# 可执行文件路径
--sbin-path=/usr/local/Cellar/nginx/1.21.3/bin/nginx
--with-cc-opt='-I/usr/local/opt/pcre/include -I/usr/local/opt/[email protected]/include'
--with-ld-opt='-L/usr/local/opt/pcre/lib -L/usr/local/opt/[email protected]/lib'
# 配置文件路径
--conf-path=/usr/local/etc/nginx/nginx.conf
# nginx进程的主进程 id 存储路径
--pid-path=/usr/local/var/run/nginx.pid
--lock-path=/usr/local/var/run/nginx.lock
# 代理产生的临时文件路径
--http-client-body-temp-path=/usr/local/var/run/nginx/client_body_temp
--http-proxy-temp-path=/usr/local/var/run/nginx/proxy_temp
--http-fastcgi-temp-path=/usr/local/var/run/nginx/fastcgi_temp
--http-uwsgi-temp-path=/usr/local/var/run/nginx/uwsgi_temp
--http-scgi-temp-path=/usr/local/var/run/nginx/scgi_temp
# 日志存储的路径
--http-log-path=/usr/local/var/log/nginx/access.log  --error-log-path=/usr/local/var/log/nginx/error.log  --with-compat --with-debug --with-http_addition_module  --with-http_auth_request_module --with-http_dav_module  --with-http_degradation_module --with-http_flv_module  --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module  --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module   --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module   --with-http_sub_module --with-http_v2_module --with-ipv6 --with-mail --with-mail_ssl_module   --with-pcre --with-pcre-jit --with-stream --with-stream_realip_module --with-stream_ssl_module   --with-stream_ssl_preread_module

nginx
# or
/usr/local/Cellar/nginx/1.21.3/bin/nginx

nginx -s reload

kill -s QUIT [pid]

ps -ax | grep nginx

#log_format  main 'remote_addr - remote_user [time_local] "request" '
#                  'status body_bytes_sent "http_referer" '
#                  '"http_user_agent" "$http_x_forwarded_for"';
#access_log  logs/access.log  main;

$status    # http状态码，记录请求返回的状态，例如200、404、301等
$request   # 用户的http请求起始行信息
$time_local   # 记录访问时间与时区
$http_referer  # 记录此次请求是从哪个链接访问过来的，可以根据referer进行防盗链设置
$remote_addr    # 记录访问网站的客户端地址
$remote_user   # 远程客户端用户名称
$http_user_agent   #记录客户端访问信息，例如：浏览器，手机客户端
$body_bytes_sent   #服务器发送给客户端的响应body字节数
$http_x_forwarded_for  #当前端有代理服务器时，记录客户端真正的地址，前提是代理服务器上也要进行相关的x_forwarded_for设置

access_log  logs/access.log  main buffer=32k;

tail -10f /usr/local/var/log/nginx/access.log

location /redirect {
# 转发后端地址
	if (request_method !~ ^(POST)){
		rewrite ^ /index.html;
	}
	proxy_pass http://{ServerHost}/api/platform-url;
}

2021/09/07 18:35:56 [crit] 19075#0: *26697 open() "nginx/proxy_temp/xxxx"  failed (13: Permission denied) while reading upstream,  client: 133.96.97.1, server: 123.com,   request: "GET /api/system/temp/filedownload?dir=&fileName=dis_DIS20210818170604519_2021090317335331.zip&reallyName=dis_DIS20210818170604519_2021090317335331.zip HTTP/1.1",   upstream: "http://xx.xx.245.86:18080/api/system/temp/filedownload?dir=&fileName=dis_DIS20210818170604519_2021090317335331.zip&reallyName=dis_DIS20210818170604519_2021090317335331.zip",   host: "xx.xx.245.82:8080",   referrer: "http://xx.xx.245.82:8080/asset-event/check-list?_r=1631009283310"

proxy_buffering on;
proxy_buffers 4 32k;
proxy_max_temp_file_size 64k;
proxy_temp_file_write_size 32k;
proxy_busy_buffer_size 32k;

chmod 777 [nginx path]

location /api {
    # 后台API地址 如：http://localhost:3000/api/
    proxy_pass http://${ip}:${port}/api/;
    # 客户端ip，携带到服务器端
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    set $Real $http_x_forwarded_for;
    if ( $Real ~ (\d+)\.(\d+)\.(\d+)\.(\d+),(.*) ){
        set $Real $1.$2.$3.$4;
    }
    proxy_set_header X-Real-Ip $Real;
  }