CentOS7yum安装和卸载Nginx

壹、安装

1.1 添加Nginx存储库

# 要添加CentOS EPEL仓库，终端使用yum命令安装
yum -y install epel-release

1.2 安装Nginx

# 现在Nginx存储库已经安装在您的服务器上，使用以下命令安装Nginx
yum -y install nginx

1.3 启动Nginx

# 启动服务
systemctl start nginx
# 查看状态
systemctl status nginx
# 停止服务
systemctl stop nginx
# 重启服务
systemctl reload nginx
# 加入开机运行
systemctl enable nginx
# 取消开机运行
systemctl disable nginx

1.4 设置防火墙

# 如果您正在运行防火墙，请运行以下命令以允许HTTP和HTTPS通信否则可跳过此步骤
# 允许HTTP通讯
firewall-cmd --permanent --zone=public --add-service=http
# 允许HTTPS通讯
firewall-cmd --permanent --zone=public --add-service=https
# 重启防火墙
firewall-cmd --reload

1.5 编辑nginx.conf

此方法安装后conf文件默认为/etc/nginx/nginx.conf

mv nginx.conf nginx.conf.bak
vim nginx.conf

粘贴以下内容：

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
include /usr/share/nginx/modules/*.conf;
events {
    worker_connections 1024;
}
http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;
    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;
    include /etc/nginx/conf.d/*.conf;
    server {
        listen       80 default_server;
        listen       [::]:80 default_server;
        server_name  _;
        root         /usr/share/nginx/html;
        include /etc/nginx/default.d/*.conf;
        location / {
        }
        error_page 404 /404.html;
        location = /404.html {
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }
}

重启 systemctl reload nginx

可以在/etc/nginx/下创建conf.d/文件夹，默认会加载conf.d/文件夹*.conf文件

贰、卸载

2.1 停止Nginx

service nginx stop

2.2 取消开机启动

chkconfig nginx off

2.3 将Nginx从服务器删除

rm -rf /usr/sbin/nginx
rm -rf /etc/nginx
rm -rf /etc/init.d/nginx

2.4 yum清理

yum remove nginx

叁、基本运用

3.1 前端服务

# 默认的80端口
server {
    listen       80;
    server_name  rongxinservice.com;
    location / {
        root   /data/rongxinservice/html;
        index  index.html index.htm;
    }
    #error_page  404              /404.html;
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /var/nginx/html;
    }
}
# SSL443端口（腾讯）
server {
     #SSL 访问端口号为 443
     listen 443 ssl;
     #填写绑定证书的域名
     server_name api.rongxinservice.com;
     #证书文件名称
     ssl_certificate /data/rongxinservice/1_api.rongxinservice.com_bundle.crt;
     #私钥文件名称
     ssl_certificate_key /data/rongxinservice/2_api.rongxinservice.com.key;
     ssl_session_timeout 5m;
     #请按照以下协议配置
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     #请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
     ssl_prefer_server_ciphers on;
     location / {
        #网站主页路径。此路径仅供参考，具体请您按照实际目录操作。
         root /data/rongxinservice/html;
         index  index.html index.htm;
     }
}

3.2 80端口强制转https

server{
    listen 80;
    server_name api.rongxinservice.com;
    return 301 https://$server_name$request_uri;
    location ~ / {
        index index.html index.php index.htm;
    }
}

融信配置备份

# 主站域名配置
server {
    listen       80;
    server_name  rongxinservice.com;
    location / {
        root   /data/rongxinservice/html;
        index  index.html index.htm;
    }
    #error_page  404              /404.html;
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /var/nginx/html;
    }
}

# 数据域名配置
server {
    listen       80;
    server_name  data.rongxinservice.com;
    location / {
        root   /data/rongxinservice/sources;
        index  index.html index.htm;
    # 开启目录列表
    autoindex on;
    }
}

# Api端口强制转换
server{
    listen 80;
    server_name api.rongxinservice.com;
    return 301 https://$server_name$request_uri;
    location ~ / {
        index index.html index.php index.htm;
    }
}

# Api域名配置
server {
     listen 443 ssl;
     server_name api.rongxinservice.com;
     ssl_certificate /data/rongxinservice/1_api.rongxinservice.com_bundle.crt; 
     ssl_certificate_key /data/rongxinservice/2_api.rongxinservice.com.key; 
     ssl_session_timeout 5m;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; 
     ssl_prefer_server_ciphers on;
     location / {
         proxy_set_header Host $host;
         proxy_pass http://xxx.xxx.xxx/;
     }
     location /sources {
        alias  /data/rongxinservice/sources;
        index  index.html index.htm;
        # 开启目录列表
        autoindex on;
     }
}