NGINX 原始碼編譯及組態實務

[user@server ~]$ mkdir src && cd src
[user@server src]$ wget https://nginx.org/download/nginx-1.25.2.tar.gz

[user@server src]$ tar zxf nginx-1.25.2.tar.gz

./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-pcre --with-zlib=../zlib-1.2.11

make
sudo make install

[user@server src]$ make

[user@server src]$ sudo make install

sudo nano /usr/local/nginx/conf/nginx.conf

server {
    listen       80;
    server_name  localhost;

    location / {
        root   html;
        index  index.html index.htm;
    }
}

[user@server ~]$ sudo /usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf

# 停止 NGINX
sudo /usr/local/nginx/sbin/nginx -s stop

# 檢查組態檔案語法是否正確並重啟 NGINX （推薦）
sudo /usr/local/nginx/sbin/nginx -s reload

# 優雅重啟（不中斷現有連線）
sudo /usr/local/nginx/sbin/nginx -s reopen

# 停止所有連線並立即離開（不推薦）
sudo /usr/local/nginx/sbin/nginx -s quit

worker_processes auto;               # 自動根據 CPU 數量設定 worker_processes 數量
events {
    worker_connections 1024;         # 每個 worker 能處理多少連線數量（限制取決於作業系統）
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;             # 開啟 sendfile 功能提高檔案傳輸效率
    tcp_nopush      on;
    tcp_nodelay     on;
    keepalive_timeout   65;         # keepalive 超時時間設為65秒

    gzip            on;             # 開啟 gzip 壓縮提高網路傳輸效率

    server {
        listen       80;
        server_name  example.com;

        location / {
            root   /path/to/root;
            index  index.html index.htm;
        }
    }
}

graph TD;
    A[Client Request] --> B[Worker Process];
    B --> C{Static File?};
    C -- Yes --> D[Serve Static File];
    C -- No --> E{Reverse Proxy?};
    E -- Yes --> F[Forward Request to Backend Server];
    E -- No --> G{Application Server?};
    G -- Yes --> H[Forward Request to Application Server];
    G -- No --> I[Return Error Page];
    D --> J[Return Response];
    F --> K[Receive Response from Backend Server];
    K --> J;
    H --> L[Receive Response from Application Server];
    L --> J;
    I --> J;

graph TD;
   A[Client Request] --> B{Load Balancer};
   B --> C[Server A];
   B --> D[Server B];
   B --> E[Server C];

   C --> F{Available?};
   D --> G{Available?};
   E --> H{Available?};

   F -- Yes --> I[Handle Request];
   F -- No --> B;

   G -- Yes --> I;
   G -- No --> B;

   H -- Yes --> I;
   H -- No --> B;

   I --> J[Return Response to Client]

http {
    upstream backend {
        server backend1.example.com;
        server backend2.example.com;
        server backend3.example.com;
    }

    server {
        listen       80;
        server_name example.com;

        location / {
            proxy_pass http://backend;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }
    }
}

server {
    listen       443 ssl;
    server_name example.com;

    ssl_certificate     /path/to/ssl_certificate.crt;
    ssl_certificate_key /path/to/ssl_certificate.key;

    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2; # only allow secure protocols (excluting older SSL protocols)
    ssl_ciphers         HIGH:!aNULL:!MD5; # Disable weak ciphers (excluting MD5-based ciphers)

    location / {
        root   /path/to/root;
        index index.html index.htm;
    }
}

log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                '$status $body_bytes_sent "$http_referer" '
                '"$http_user_agent" "$http_x_forwarded_for"';

access_log /var/log/nginx/access.log main;

error_log /var/log/nginx/error.log warn;

worker_processes auto; # 自動根據 CPU 數量設定 worker_processes 數量。

gzip on;              # 開啟 gzip 壓縮功能；
gzip_min_length      1k;             # 壓縮內容長度達到此值才進行壓縮；
gzip_buffers         4              # 指令設定 gzip 壓縮所需要快取大小；
gzip_http_version     gzip http/1.0;             # 指令表示壓縮資料要求 http 的協定為 http/1.x；

gzip_types text/plain application/x-javascript application/xml application/xml+rss text/css text/javascript text/x-js application/x-shockwave-flash image/svg+xml font/font-symbol font/vml x-font-x-icon x-font-opentype x-font-opentype-generic x-font-opentype-variant x-font-opentype-style x-font-opentype-weight x-font-opentype-stretch x-font-opentype-adstyle x-font-opentype-vendor x-font-opentype-product x-font-opentype-variant-ligature x-font-opentype-variant-alt x-font-opentype-variant-alt-ligature x-font-opentype-variant-alt-capitalization x-font-opentype-variant-alt-case-sensitivity x-font-opentype-variant-alt-character-set x-font-opentype-variant-alt-display-sensitivity x-font-opentype-variant-alt-histogram-level-x y;font-family:style font-family:weight font-family:style font-family:width font-family:slant font-family:width-integer font-family:slant-integer font-family:slant-angle font-family:slant-angle integer font-family:slant-angle integer font-style name font-weight name font-style name font-weight name font-style name;font-size;font-size medium;font-size small;font-size large;font-size extra-large;font-size xx-large;font-size xxx-large;font-size small-caps;font-size small-caps bold;font-size small-caps normal weight;font-size small-caps bold weight;font-size small-caps bold italic weight;font-size small-caps bold italic normal weight;font-stretch:none;font-stretch:-condensed;font-stretch:-extra-expanded;font-stretch:-expanded;# 各種資料型別應用壓縮；