1、解決依賴關系
編譯安裝nginx需要事先需要安裝開發包組"Development Tools"和 "Development Libraries"。同時，還需要專門安裝pcre-devel包：
# yum -y install pcre-devel
2、編譯安裝
首先添加用戶nginx，實現以之運行nginx服務進程：
# groupadd -r nginx
# useradd -r -g nginx -s /sbin/nologin nginx
接著開始編譯和安裝：
#wget http://nginx.org/download/nginx-1.15.2.tar.gz
#tar zxf nginx-1.15.2.tar.gz
#cd nginx-1.15.2
#./configure --prefix=/usr --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx/nginx.pid --lock-path=/var/lock/nginx.lock --user=nginx --group=nginx --with-http_ssl_module --with-http_flv_module --with-http_stub_status_module --with-http_gzip_static_module --http-client-body-temp-path=/var/tmp/nginx/client/ --http-proxy-temp-path=/var/tmp/nginx/proxy/ --http-fastcgi-temp-path=/var/tmp/nginx/fcgi/ --http-uwsgi-temp-path=/var/tmp/nginx/uwsgi --http-scgi-temp-path=/var/tmp/nginx/scgi --with-pcre
# make && make install
說明：如果想使用nginx的perl模塊，可以通過為configure腳本添加–with-http_perl_module選項來實現，但目前此模塊仍處于實驗性使用階段，可能會在運行中出現意外，因此，其實現方式這里不再介紹。如果想使用基于nginx的cgi功能，也可以基于FCGI來實現，具體實現方法請參照網上的文檔。
3、為nginx提供SysV init腳本:
新建文件/etc/rc.d/init.d/nginx，內容如下：
#!/bin/sh
#
# nginx – this script starts and stops the nginx daemon
#
# chkconfig: 2345 85 15
# description: Nginx is an HTTP(S) server, HTTP(S) reverse \
# proxy and IMAP/POP3 proxy server
# processname: nginx
# config: /etc/nginx/nginx.conf
# config: /etc/sysconfig/nginx
# pidfile: /var/run/nginx.pid
# Source function library.
. /etc/rc.d/init.d/functions
# Source networking configuration.
. /etc/sysconfig/network
# Check that networking is up.
[ "$NETWORKING" = "no" ] && exit 0
nginx="/usr/sbin/nginx"
prog=$(basename $nginx)
NGINX_CONF_FILE="/etc/nginx/nginx.conf"
[ -f /etc/sysconfig/nginx ] && . /etc/sysconfig/nginx
lockfile=/var/lock/subsys/nginx
make_dirs() {
# make required directories
user=`nginx -V 2>&1 | grep "configure arguments:" | sed 's/[^*]*–user=\([^ ]*\).*/\1/g' -`
options=`$nginx -V 2>&1 | grep 'configure arguments:'`
for opt in $options; do
if [ `echo $opt | grep '.*-temp-path'` ]; then
value=`echo $opt | cut -d "=" -f 2`
if [ ! -d "$value" ]; then
# echo "creating" $value
mkdir -p $value && chown -R $user $value
fi
fi
done
}
start() {
[ -x $nginx ] || exit 5
[ -f $NGINX_CONF_FILE ] || exit 6
make_dirs
[ -d /var/run/nginx ] || mkdir /var/run/nginx
echo -n $"Starting $prog: "
daemon $nginx -c $NGINX_CONF_FILE
retval=$?
echo
[ $retval -eq 0 ] && touch $lockfile
return $retval
}
stop() {
echo -n $"Stopping $prog: "
killproc $prog -QUIT
retval=$?
echo
[ $retval -eq 0 ] && rm -f $lockfile
return $retval
}
restart() {
configtest || return $?
stop
sleep 1
start
}
reload() {
configtest || return $?
echo -n $"Reloading $prog: "
killproc $nginx -HUP
RETVAL=$?
echo
}
force_reload() {
restart
}
configtest() {
$nginx -t -c $NGINX_CONF_FILE
}
rh_status() {
status $prog
}
rh_status_q() {
rh_status >/dev/null 2>&1
}
case "$1" in
start)
rh_status_q && exit 0
$1
;;
stop)
rh_status_q || exit 0
$1
;;
restart|configtest)
$1
;;
reload)
rh_status_q || exit 7
$1
;;
force-reload)
force_reload
;;
status)
rh_status
;;
condrestart|try-restart)
rh_status_q || exit 0
;;
*)
echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"
exit 2
esac
而后為此腳本賦予執行權限：
# chmod +x /etc/rc.d/init.d/nginx
添加至服務管理列表，并讓其開機自動啟動：
# chkconfig --add nginx
# chkconfig nginx on
#chown -R nginx.nginx /etc/nginx/
#chown -R nginx.nginx /var/run/nginx/
#mkdir -p /var/tmp/nginx/{client,proxy,fastcgi,uwsgi,scgi}
#rm -rf /run/systemd/generator.late/nginx.service
而后就可以啟動服務并測試了：
# service nginx start
4、配置反向代理
upstream test {
server localhost:8080 weight=1;
}
server {
listen 80;
server_name test.amd5.cn;
access_log /var/log/nginx/test_access.log;
error_log /var/log/nginx/test_error.log debug;
location / {
proxy_pass http://test;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_max_body_size 2m; #允許客戶端請求的最大單文件字節數
client_body_buffer_size 128k; #緩沖區代理緩沖用戶端請求的最大字節數
proxy_connect_timeout 90; #nginx跟后端服務器連接超時時間(代理連接超時)
proxy_read_timeout 90; #連接成功后，后端服務器響應時間(代理接收超時)
proxy_buffer_size 4k; #設置代理服務器（nginx）保存用戶頭信息的緩沖區大小
proxy_buffers 6 32k; #proxy_buffers緩沖區，網頁平均在32k以下的話>，這樣設置
proxy_busy_buffers_size 64k; #高負荷下緩沖大?。╬roxy_buffers*2）
proxy_temp_file_write_size 64k; #設定緩存文件夾大小，大于這個值，將從upstream服務器傳
}
}
5、配置http
server {
listen 80;
listen 443 ssl;
auth_basic off;
root /data/wwwroot;
index index.html index.htm;
server_name m.maowutv.com;
#https配置
ssl_certificate /etc/nginx/ssl/m.maowutv.com.pem; # 證書文件
ssl_certificate_key /etc/nginx/ssl/m.maowutv.com.key; # 密鑰對文件(包含公鑰和私鑰, 私鑰不會發給客戶端)
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # SSL(包括 v3)都有漏洞，應該用 TLS(TLS1.0 = SSL 3.1)
ssl_prefer_server_ciphers on;
if ($scheme != https) { # 強制 HTTP 跳轉至 HTTPS
# host 與 server_name 等價, redirect/permanent 分別為臨時跳轉/永久跳轉
rewrite ^(.*)$ https://$host$1 permanent;
}
access_log /var/log/nginx/m.maowutv.com_access.log;
error_log /var/log/nginx/m.maowutv.com_error.log debug;
#圖片防盜鏈
location ~* \.(gif|jpg|png|bmp|jpeg|swf|flv|avi|mp4)$ {
valid_referers m.maowutv.com server_names ~\.baidu\. ~\.sogou\. ~\360\.;
if ($invalid_referer) {
#rewrite ^/ m.maowutv.com;
return 403;
}
}
}
本地私有證書簽發參考：Centos Apache基于openssl的https服務配置
Nginx反向代理詳細配置參考：Nginx反向代理安裝配置
